[19.04] application credential create and delete buttons for non-admin projects are missing due to missing policy rules

[Dmitrii Shcherbakov]

Application credentials pane is enabled in Horizon as of Rocky (*): https://blueprints.launchpad.net/horizon/+spec/application-credentials

However, create and delete buttons are missing in non-admin projects.

This is due to missing policy rules for application_credential API calls:

https://docs.openstack.org/keystone/latest/configuration/samples/policy-yaml.html

# Show application credential details.
# GET /v3/users/{user_id}/application_credentials/{application_credential_id}
# HEAD /v3/users/{user_id}/application_credentials/{application_credential_id}
#"identity:get_application_credential": "rule:admin_or_owner"

# List application credentials for a user.
# GET /v3/users/{user_id}/application_credentials
# HEAD /v3/users/{user_id}/application_credentials
#"identity:list_application_credentials": "rule:admin_or_owner"

# Create an application credential.
# POST /v3/users/{user_id}/application_credentials
#"identity:create_application_credential": "rule:admin_or_owner"

# Delete an application credential.
# DELETE /v3/users/{user_id}/application_credentials/{application_credential_id}
#"identity:delete_application_credential": "rule:admin_or_owner"

(*) For successful authentication using application credentials, application_credential auth method needs to be enabled in keystone.conf
https://bugs.launchpad.net/charm-keystone/+bug/1827058

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/656573

[Dmitrii Shcherbakov (dmitriis)]

Subscribed ~field-medium.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/656573
Committed: https://git.openstack.org/cgit/openstack/charm-openstack-dashboard/commit/?id=4573def42a756770df7294d5715c3398c1f0fe17
Submitter: Zuul
Branch: master

commit 4573def42a756770df7294d5715c3398c1f0fe17
Author: Dmitrii Shcherbakov <email address hidden>
Date: Tue Apr 30 21:44:22 2019 +0300

    Add app-credentials-specific policy rules

    In order to have Create and Delete buttons for application credentials
    in non-admin projects we need to add the respective policy.json rules.

    The dashboard pane for application credentials was added in Rocky.

    Change-Id: I42d4772ebe185c35cc5e81c36ebdb3f6f6c169c4
    Closes-Bug: #1827107

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/19.04
Review: https://review.opendev.org/656651

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/656651
Committed: https://git.openstack.org/cgit/openstack/charm-openstack-dashboard/commit/?id=81e45184a1c0ed748928ff994defb79af7981f11
Submitter: Zuul
Branch: stable/19.04

commit 81e45184a1c0ed748928ff994defb79af7981f11
Author: Dmitrii Shcherbakov <email address hidden>
Date: Tue Apr 30 21:44:22 2019 +0300

    Add app-credentials-specific policy rules

    In order to have Create and Delete buttons for application credentials
    in non-admin projects we need to add the respective policy.json rules.

    The dashboard pane for application credentials was added in Rocky.

    Change-Id: I42d4772ebe185c35cc5e81c36ebdb3f6f6c169c4
    Closes-Bug: #1827107