diff options
| author | Claudiu Belu <cbelu@cloudbasesolutions.com> | 2016-04-05 20:56:17 +0300 |
|---|---|---|
| committer | Claudiu Belu <cbelu@cloudbasesolutions.com> | 2016-04-05 20:56:17 +0300 |
| commit | e6612df5782363be6aa03174187a98d287c0406a (patch) | |
| tree | d703f8d315ed7b4370f6b6b1bbe0ffe816bd1749 | |
| parent | 1c74f7415f1e1be221b92db5f95d21be13e88b0b (diff) | |
| download | nova-e6612df5782363be6aa03174187a98d287c0406a.tar.gz | |
Adds missing discoverable rules in policy.json
A few discoverable rules are missing in policy.json.
Change-Id: I7b020a2498a4e141d0840e2cda5bb2a87fcf5c38
| -rw-r--r-- | etc/nova/policy.json | 5 | ||||
| -rw-r--r-- | nova/tests/unit/test_policy.py | 3 |
2 files changed, 7 insertions, 1 deletions
diff --git a/etc/nova/policy.json b/etc/nova/policy.json index dc35f0c204..236abdce60 100644 --- a/etc/nova/policy.json +++ b/etc/nova/policy.json @@ -312,6 +312,7 @@ "os_compute_api:os-cloudpipe": "rule:admin_api", "os_compute_api:os-cloudpipe:discoverable": "@", "os_compute_api:os-config-drive": "rule:admin_or_owner", + "os_compute_api:os-config-drive:discoverable": "@", "os_compute_api:os-consoles:discoverable": "@", "os_compute_api:os-consoles:create": "rule:admin_or_owner", "os_compute_api:os-consoles:delete": "rule:admin_or_owner", @@ -487,5 +488,7 @@ "os_compute_api:os-assisted-volume-snapshots:delete": "rule:admin_api", "os_compute_api:os-assisted-volume-snapshots:discoverable": "@", "os_compute_api:os-console-auth-tokens": "rule:admin_api", - "os_compute_api:os-server-external-events:create": "rule:admin_api" + "os_compute_api:os-console-auth-tokens:discoverable": "@", + "os_compute_api:os-server-external-events:create": "rule:admin_api", + "os_compute_api:os-server-external-events:discoverable": "@" } diff --git a/nova/tests/unit/test_policy.py b/nova/tests/unit/test_policy.py index 998106a61f..e36c8c208f 100644 --- a/nova/tests/unit/test_policy.py +++ b/nova/tests/unit/test_policy.py @@ -640,6 +640,7 @@ class RealRolePolicyTestCase(test.NoDBTestCase): "os_compute_api:os-cells:discoverable", "os_compute_api:os-certificates:discoverable", "os_compute_api:os-cloudpipe:discoverable", +"os_compute_api:os-config-drive:discoverable", "os_compute_api:os-consoles:discoverable", "os_compute_api:os-console-output:discoverable", "os_compute_api:os-remote-consoles:discoverable", @@ -707,6 +708,8 @@ class RealRolePolicyTestCase(test.NoDBTestCase): "os_compute_api:os-used-limits:discoverable", "os_compute_api:os-migrations:discoverable", "os_compute_api:os-assisted-volume-snapshots:discoverable", +"os_compute_api:os-console-auth-tokens:discoverable", +"os_compute_api:os-server-external-events:discoverable", ) def test_all_rules_in_sample_file(self): |