Redundant rule:cloud_admin in list_role_assignments v3 policy file

[Timothy Symanczyk]

policy.v3cloudsample.json contains the following three lines :

    "admin_on_domain_filter" : "rule:cloud_admin or (rule:admin_required and domain_id:%(scope.domain.id)s)",
    "admin_on_project_filter" : "rule:cloud_admin or (rule:admin_required and project_id:%(scope.project.id)s)",
    "identity:list_role_assignments": "rule:admin_on_domain_filter or rule:admin_on_project_filter",

With rule:cloud_admin being included in both sub-rules, it is then included twice within the final rule. The two sub-rules are currently only utilized in the one location.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/213338

[Dolph Mathews (dolph)]

I'm setting this to incomplete because the proposed change does not eliminate a redundancy. Please close this bug if the change should be abandoned.

[Timothy Symanczyk (timothy-symanczyk)]

Changing back to In Progress. There appears to have been a misunderstanding that is now resolved, and people seem to now agree that the change removes a legitimate redundancy.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/213338
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=85b81583955bf30ed0e82347e8159235ee839b9a
Submitter: Jenkins
Branch: master

commit 85b81583955bf30ed0e82347e8159235ee839b9a
Author: Timothy Symanczyk <email address hidden>
Date: Thu Aug 13 23:49:40 2015 -0700

    Simplify rule in sample v3 policy file

    Remove redundant rule:cloud_admin from list_role_assignment
    rule in sample v3 policy file.

    Closes-Bug: #1485104

    Change-Id: I0b65585c675c5b249d92cdce412efa7f3ac3c41b