This commit adjust the create and revoke grant policies to be
consistent with other system admin policy check strings by not using
the rule:admin_required check string and by including system_scope:all
in the rule itself.
Subsequent patches will:
- implement domain reader and member support
- implement domain admin support
- introduce test coverage for project users and the grants API
- remove redundant policies from policy.v3cloudsample.json
Reviewed: https:/ /review. openstack. org/645890 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=ef838a3a3f5 75562b1fc84623c 3a8491d4f2e2f4
Committed: https:/
Submitter: Zuul
Branch: master
commit ef838a3a3f57556 2b1fc84623c3a84 91d4f2e2f4
Author: Lance Bragstad <email address hidden>
Date: Fri Mar 22 21:25:07 2019 +0000
Make system admin policies consistent for grants
This commit adjust the create and revoke grant policies to be
consistent with other system admin policy check strings by not using
the rule:admin_required check string and by including system_scope:all
in the rule itself.
Subsequent patches will:
- implement domain reader and member support v3cloudsample. json
- implement domain admin support
- introduce test coverage for project users and the grants API
- remove redundant policies from policy.
Related-Bug: 1805368
Related-Bug: 1750669
Related-Bug: 1806762
Change-Id: Idcbe16f643332d 80af716074cf3ea 22525d465a9