Need to use policy rules for API catalog calls

Bug #1412868 reported by Ekaterina Chernova
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Murano
Fix Released
Medium
Ekaterina Chernova

Bug Description

In catalog API request context is used directly.

Need to use policy instead.
If needed, new policy should be added.

Changed in murano:
assignee: nobody → Ekaterina Chernova (efedorova)
milestone: none → kilo-2
status: New → Confirmed
importance: Undecided → Medium
Changed in murano:
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to murano (master)

Fix proposed to branch: master
Review: https://review.openstack.org/150044

Changed in murano:
milestone: kilo-2 → kilo-3
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to murano (master)

Reviewed: https://review.openstack.org/150044
Committed: https://git.openstack.org/cgit/stackforge/murano/commit/?id=d82b74b62f08fe226c17f2415fe1367e4a0d3a4f
Submitter: Jenkins
Branch: master

commit d82b74b62f08fe226c17f2415fe1367e4a0d3a4f
Author: Ekaterina Chernova <email address hidden>
Date: Fri Feb 27 11:05:07 2015 +0300

    Update API policy

    * Set admin rule for a several API calls and remove direct check in code
    * Now admin can configure policy.json and enable package management for regular users
    * Update common policy module

    Closes-Bug: #1412868

    Change-Id: I8d0725b613564529d32a5acef289f4822f32915c

Changed in murano:
status: In Progress → Fix Committed
Changed in murano:
status: Fix Committed → Fix Released
Changed in murano:
milestone: kilo-3 → 2015.1.0
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.