commit 7d5db13b915ed1617b18cca6e84393f148e62285
Author: Dan Wendlandt <email address hidden>
Date: Sun Jul 8 12:34:22 2012 -0700
Fix v2 API policy checks when keystone is in use.
bug 1022032. There were significant errors in how
the policy framework was being invoked, but existing
tests did now show them, since they always invoked the
API with no keystone context. This patch fixes those
issues and add a significant amount of test coverage
simulating API calls with keystone enabled.
As part of this patch, we also needed to add a tenant-id
attribute to the subnet object. Furthermore, we
changed the API validation code to prevent tenant-id from
being changed with a PUT, since changing it after creation
could invalidate some of the create checks we're planning
on adding (e.g., that a port is being created on a network
owned by the same tenant).
Reviewed: https:/ /review. openstack. org/9473 github. com/openstack/ quantum/ commit/ 7d5db13b915ed16 17b18cca6e84393 f148e62285
Committed: http://
Submitter: Jenkins
Branch: master
commit 7d5db13b915ed16 17b18cca6e84393 f148e62285
Author: Dan Wendlandt <email address hidden>
Date: Sun Jul 8 12:34:22 2012 -0700
Fix v2 API policy checks when keystone is in use.
bug 1022032. There were significant errors in how
the policy framework was being invoked, but existing
tests did now show them, since they always invoked the
API with no keystone context. This patch fixes those
issues and add a significant amount of test coverage
simulating API calls with keystone enabled.
As part of this patch, we also needed to add a tenant-id
attribute to the subnet object. Furthermore, we
changed the API validation code to prevent tenant-id from
being changed with a PUT, since changing it after creation
could invalidate some of the create checks we're planning
on adding (e.g., that a port is being created on a network
owned by the same tenant).
Change-Id: I6da61f0d4ac3b2 59aa0afcd42cfa8 e6ec1a9b035