oslopolicy-checker hardcodes match of project_id

[Adam Young]

One shortcut I made when writing the policy checker was that I ensured the project ID from the token would be used in the target:

    access_data = jsonutils.loads(access)['token']
    access_data['project_id'] = access_data['project']['id']
...
    target = {"project_id": access_data['project_id']}

This implies to a user that the API is actually checking the scope of the target. However, there is no way to pass target data in to the the policy engine.

Thus, there is no way to confirm that it will reject if the target has a different project_id, nor does it allow more complex checks on other attributes from the target data.