commit 410d8da15d6c6f14e86cd8eac21f696a1ef5fa86
Author: Mehdi Abaakouk <email address hidden>
Date: Mon Dec 7 09:52:57 2015 +0100
Fix rbac system
After investigation of the heat breakage, after
we update the policy.json. We discover
that the rbac have never worked as expected.
The only rule that works is role == admin. All other
just can't works.
So the policy file have been changed to, By default project
owner of the alarm should be able to change their alarms.
And anyone can create a new alarm.
Also the alarm definition is now passed to the policy enforcer
to allow it checks owner of the alarms.
Reviewed: https:/ /review. openstack. org/260478 /git.openstack. org/cgit/ openstack/ aodh/commit/ ?id=410d8da15d6 c6f14e86cd8eac2 1f696a1ef5fa86
Committed: https:/
Submitter: Jenkins
Branch: stable/liberty
commit 410d8da15d6c6f1 4e86cd8eac21f69 6a1ef5fa86
Author: Mehdi Abaakouk <email address hidden>
Date: Mon Dec 7 09:52:57 2015 +0100
Fix rbac system
After investigation of the heat breakage, after
we update the policy.json. We discover
that the rbac have never worked as expected.
The only rule that works is role == admin. All other
just can't works.
So the policy file have been changed to, By default project
owner of the alarm should be able to change their alarms.
And anyone can create a new alarm.
Also the alarm definition is now passed to the policy enforcer
to allow it checks owner of the alarms.
Closes-bug: #1504495
Conflicts: tests/functiona l/gabbi/ fixtures. py
aodh/
The conflict is an useless additional import.
Change-Id: I408d839eec84af 46adb333a6ad5c4 9c890513fd0 48c4fb420da838a cc4b387af3)
(cherry picked from commit dde971215269734