commit bf1cdf474033becc9c1a1df62be5763fef4daffb
Author: Thomas Maddox <email address hidden>
Date: Thu Feb 16 15:36:21 2017 +0000
RBAC-Lite for generic resources implementation
This patch re-applies RBAC-lite to the /projects
endpoint. For the top-level /projects endpoint,
permissions have been narrowed to only root
project users. Anything pertaining to a specific
project has been narrowed to project admin users.
This patch implements a decorator to afford us the
same features for the generic resources functions
that @require_project_admin_context and
@require_admin_context decorators afforded us
piecemeal for other DB API functions.
Reviewed: https:/ /review. openstack. org/434976 /git.openstack. org/cgit/ openstack/ craton/ commit/ ?id=bf1cdf47403 3becc9c1a1df62b e5763fef4daffb
Committed: https:/
Submitter: Jenkins
Branch: master
commit bf1cdf474033bec c9c1a1df62be576 3fef4daffb
Author: Thomas Maddox <email address hidden>
Date: Thu Feb 16 15:36:21 2017 +0000
RBAC-Lite for generic resources implementation
This patch re-applies RBAC-lite to the /projects
endpoint. For the top-level /projects endpoint,
permissions have been narrowed to only root
project users. Anything pertaining to a specific
project has been narrowed to project admin users.
This patch implements a decorator to afford us the project_ admin_context and admin_context decorators afforded us
same features for the generic resources functions
that @require_
@require_
piecemeal for other DB API functions.
Change-Id: I875a9a8cb68c76 d27f613bac6f4b8 7f3a1e2b411
Closes-Bug: 1665237
Closes-Bug: 1648626