Comment 2 for bug 1022032

Reviewed: https://review.openstack.org/9473
Committed: http://github.com/openstack/quantum/commit/7d5db13b915ed1617b18cca6e84393f148e62285
Submitter: Jenkins
Branch: master

commit 7d5db13b915ed1617b18cca6e84393f148e62285
Author: Dan Wendlandt <email address hidden>
Date: Sun Jul 8 12:34:22 2012 -0700

    Fix v2 API policy checks when keystone is in use.

    bug 1022032. There were significant errors in how
    the policy framework was being invoked, but existing
    tests did now show them, since they always invoked the
    API with no keystone context. This patch fixes those
    issues and add a significant amount of test coverage
    simulating API calls with keystone enabled.

    As part of this patch, we also needed to add a tenant-id
    attribute to the subnet object. Furthermore, we
    changed the API validation code to prevent tenant-id from
    being changed with a PUT, since changing it after creation
    could invalidate some of the create checks we're planning
    on adding (e.g., that a port is being created on a network
    owned by the same tenant).

    Change-Id: I6da61f0d4ac3b259aa0afcd42cfa8e6ec1a9b035