In case of policy rule checks for rules like e.g.
"create_port:fixed_ips:subnet" couldn't be created to be
passed to policy enforcer because policy module could only
create rule checks for subattributes which are dict types.
With this patch checks for such rules can be created also for
attributes which are list of dicts, like e.g. fixed_ips in port
resource.
Conflicts: neutron/conf/policies/port.py
Change-Id: I02fffe77f57a513d2362df78885d327042bb8095
Closes-Bug: #1822105
(cherry picked from commit 9318fb8bb930a65cb0b388fd4a40fc83183d9199)
(cherry picked from commit a238b1bed6e8ee3a33cd7a7116501ebb3d852b44)
Reviewed: https:/ /review. opendev. org/657937 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=8e777c681f3 9a24b2385f57b8c 2748c0c4648db6
Committed: https:/
Submitter: Zuul
Branch: stable/rocky
commit 8e777c681f39a24 b2385f57b8c2748 c0c4648db6
Author: Slawek Kaplonski <email address hidden>
Date: Thu Mar 28 21:36:11 2019 +0100
Fix creating policy rules from subattributes.
In case of policy rule checks for rules like e.g. port:fixed_ ips:subnet" couldn't be created to be
"create_
passed to policy enforcer because policy module could only
create rule checks for subattributes which are dict types.
With this patch checks for such rules can be created also for
attributes which are list of dicts, like e.g. fixed_ips in port
resource.
Conflicts:
neutron/ conf/policies/ port.py
Change-Id: I02fffe77f57a51 3d2362df78885d3 27042bb8095 cb0b388fd4a40fc 83183d9199) a33cd7a7116501e bb3d852b44)
Closes-Bug: #1822105
(cherry picked from commit 9318fb8bb930a65
(cherry picked from commit a238b1bed6e8ee3