This commit adjust the create and revoke grant policies to be
consistent with other system admin policy check strings by not using
the rule:admin_required check string and by including system_scope:all
in the rule itself.
Subsequent patches will:
- implement domain reader and member support
- implement domain admin support
- introduce test coverage for project users and the grants API
- remove redundant policies from policy.v3cloudsample.json
Reviewed: https:/ /review. openstack. org/647815 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=933b7509a41 77680158baeeb58 2f82470f73ae38
Committed: https:/
Submitter: Zuul
Branch: stable/stein
commit 933b7509a417768 0158baeeb582f82 470f73ae38
Author: Lance Bragstad <email address hidden>
Date: Fri Mar 22 21:25:07 2019 +0000
Make system admin policies consistent for grants
This commit adjust the create and revoke grant policies to be
consistent with other system admin policy check strings by not using
the rule:admin_required check string and by including system_scope:all
in the rule itself.
Subsequent patches will:
- implement domain reader and member support v3cloudsample. json
- implement domain admin support
- introduce test coverage for project users and the grants API
- remove redundant policies from policy.
Related-Bug: 1805368
Related-Bug: 1750669
Related-Bug: 1806762
Change-Id: Idcbe16f643332d 80af716074cf3ea 22525d465a9 2b1fc84623c3a84 91d4f2e2f4)
(cherry picked from commit ef838a3a3f57556