vnc_api needs to filter the subfield updated during update request

[Senthilnathan Murugappan]

Version: 3.2.6.0~kilo

VNC Api sends an update of all subfields in a field (for eg: virtual_network_properties) and not the updated subfield(for eg: allow_transit of vn_properties) alone hence we match against all the subfields due to which a user may not be able to update a subfield.

WorkAround:
1) One has to delete the attributes which are not updated from the field class (for eg: all the attributes of virtual_network_properties except allow_transit) and then call the vn_obj.set_virtual_network_properties().

2) Use RestApi or Contrail-UI instead of vnc_api.

[OpenContrail Admin (ci-admin-f)]

Review in progress for https://review.opencontrail.org/36310
Submitter: Suresh Vinapamula (<email address hidden>)

[OpenContrail Admin (ci-admin-f)]

Reviewed: https://review.opencontrail.org/36310
Committed: http://github.com/Juniper/contrail-controller/commit/9fea55cb80be252d555cdfa4de103f08d1b5a4e9
Submitter: Zuul (<email address hidden>)
Branch: R3.2

commit 9fea55cb80be252d555cdfa4de103f08d1b5a4e9
Author: Suresh Venkata <email address hidden>
Date: Thu Oct 5 16:37:15 2017 -0700

Multiple RBAC fixes

Descrption:
1) Domain children objects, should have owner as tenant from env
in which it is created.
2) More descriptive error messages. More changes are need in neutron
plugin code to relay the error message from api-server to neutron
client. It will come as another patch. So, it is partial bug.
3) Missing exception handling code.
4) Sub field rules configured but no sub fields in the request
should be subjected to generic rule match.
5) Latency issue for floating IP list from neutron.
6) Error in dbe resync when perms2 owner is missing.
7) uuid and fq_name fields are filtered from subjecting to rbac rules.

Change-Id: Id0cb9ce3a413cd233e18ce2c42c5e18a83ae8dd5
Partial-Bug: #1721609
Closes-Bug: #1718972
Closes-Bug: #1721620

[Senthilnathan Murugappan (msenthil)]

Patch added at comment#7 is unrelated to the bug

[Suresh Vinapamula (sureshk)]

Sub field support will be removed, as it provides little value, and user have to know complete schema.