Adds default policy rules for resources which are limited to admin

Bug #1582187 reported by huangtianhua
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Heat
Fix Released
Low
huangtianhua

Bug Description

Heat has several resources which are limited to being used by administrators only by default policy rule. Such as:
OS::Cinder::EncryptedVolumeType
OS::Cinder::VolumeType
OS::Neutron::QoSPolicy
OS::Neutron::QoSBandwidthLimitRule

This change will add the default policy rules for these resources to tell user the forbidden reason in the early time instead of in creating progress.

Changed in heat:
assignee: nobody → huangtianhua (huangtianhua)
description: updated
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to heat (master)

Fix proposed to branch: master
Review: https://review.openstack.org/317329

Changed in heat:
status: New → In Progress
Thomas Herve (therve)
Changed in heat:
milestone: none → newton-2
importance: Undecided → Low
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to heat (master)

Reviewed: https://review.openstack.org/317329
Committed: https://git.openstack.org/cgit/openstack/heat/commit/?id=a52b82185723e2bcea8a1f1cdea32214ed7287e5
Submitter: Jenkins
Branch: master

commit a52b82185723e2bcea8a1f1cdea32214ed7287e5
Author: huangtianhua <email address hidden>
Date: Tue May 17 16:55:45 2016 +0800

    Adds default policy rule for resources limited to administrator

    Adds default policy rule for resources which are limited to
    administrator, to forbid non-admin to create these resources
    at the very start.

    Change-Id: I9e1ef86f0c44bce5bde3f9e26e1f2b9cb3aef06d
    Closes-Bug: #1582187

Changed in heat:
status: In Progress → Fix Released
Revision history for this message
Doug Hellmann (doug-hellmann) wrote : Fix included in openstack/heat 7.0.0.0b2

This issue was fixed in the openstack/heat 7.0.0.0b2 development milestone.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.