diff options
| author | unicell <unicell@gmail.com> | 2012-08-18 14:23:01 +0800 |
|---|---|---|
| committer | unicell <unicell@gmail.com> | 2012-08-19 00:31:23 +0800 |
| commit | c6be78deb6a3a7cbf092efdfb54f561ce689605f (patch) | |
| tree | faec33ed92d186a6e927d0dd1201b922a6dce0b2 /etc | |
| parent | a10be151ad9f62bb916498c8dae42e4b54dfc779 (diff) | |
| download | nova-c6be78deb6a3a7cbf092efdfb54f561ce689605f.tar.gz | |
Remove hard-coded 'admin' role checking and use policy instead
bug 1037786
This change removed hard-coded 'admin' role checking, and use policy check to
decide is_admin at the time of context construction. And also set
default admin role to 'admin', in policy template, to keep backward
compatibility.
Change-Id: I56b45bfdfba1b8e1391bde7fec3d4cf26c66324c
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/nova/policy.json | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/etc/nova/policy.json b/etc/nova/policy.json index 3970ce96ae..02bf503cd7 100644 --- a/etc/nova/policy.json +++ b/etc/nova/policy.json @@ -1,4 +1,5 @@ { + "admin": [["role:admin"]], "admin_or_owner": [["role:admin"], ["project_id:%(project_id)s"]], "default": [["rule:admin_or_owner"]], |