The policy.json file in Configuration Reference - compute:get_all no longer exists

[Matt Riedemann]

- [x] This doc is inaccurate in this way:

The "compute:get_all" example is no longer valid, that rule does not exist in Nova in Ocata. It did back in Mitaka, but in Newton the policy for Nova was all moved into code. The "compute:get_all" rule was for the old v2 API.

With the v2.1 API the rule is now something like "os_compute_api:servers:index" or "os_compute_api:servers:detail" depending on the actual API that is called.

This is a minor issue, very low severity, but the docs could be updated to replace "compute:get_all" with "os_compute_api:servers:detail" for the example.

-----------------------------------
Release: 15.0.0 on 2017-04-10 10:26
SHA: 42e384ee11368ba8ad1545b6bd3042ee66954062
Source: https://git.openstack.org/cgit/openstack/openstack-manuals/tree/doc/config-reference/source/policy-json-file.rst
URL: https://docs.openstack.org/ocata/config-reference/policy-json-file.html

[Matt Riedemann (mriedem)]

The examples are also a bit odd because before the examples there is a warning about not modifying from the defaults:

"While recipes for editing policy.json files are found on blogs, modifying the policy can have unexpected side effects and is not encouraged."

But then the example shows:

"compute:get_all" : ""

Which was not the actual default back when this was defined in Mitaka:

"compute:get_all": "rule:admin_or_owner",

https://github.com/openstack/nova/blob/stable/mitaka/etc/nova/policy.json#L14

[Alexandra Settle (alexandra-settle)]

Chetna - are you still working on this issue?

[Stephen Finucane (stephenfinucane)]

Looks like this might still be valid for Ocata. I'll take a look.

[Stephen Finucane (stephenfinucane)]

The way we generate policy docs now (using 'oslo_policy.sphinxext') means our local copies of this document are automatically up-to-date. This is no longer an issue and similar issues should not recur going forward.