Introduce scope_types in baremetal node

Appropriate scope_type for nova case:
- https://specs.openstack.org/openstack/nova-specs/specs/ussuri/approved/policy-defaults-refresh.html#scope

This commit introduce scope_type for baremetal nodes policies
as 'system'.

Also adds the test case with scope_type enabled and verify we
pass and fail the policy check with expected context.

Partial implement blueprint policy-defaults-refresh-deprecated-apis

Change-Id: Ieed4e23c4296fe8a338910a235348574327decb3

1 files changed, 6 insertions, 5 deletions

diff --git a/nova/policies/baremetal_nodes.py b/nova/policies/baremetal_nodes.py
index 6f52f44123..1fa68abcad 100644
--- a/nova/policies/baremetal_nodes.py
+++ b/nova/policies/baremetal_nodes.py
@@ -23,13 +23,13 @@ BASE_POLICY_NAME = 'os_compute_api:os-baremetal-nodes'
 
 baremetal_nodes_policies = [
     policy.DocumentedRuleDefault(
-        BASE_POLICY_NAME,
-        base.RULE_ADMIN_API,
-        """List and show details of bare metal nodes.
+        name=BASE_POLICY_NAME,
+        check_str=base.RULE_ADMIN_API,
+        description="""List and show details of bare metal nodes.
 
 These APIs are proxy calls to the Ironic service and are deprecated.
 """,
-        [
+        operations=[
             {
                 'method': 'GET',
                 'path': '/os-baremetal-nodes'
@@ -38,7 +38,8 @@ These APIs are proxy calls to the Ironic service and are deprecated.
                 'method': 'GET',
                 'path': '/os-baremetal-nodes/{node_id}'
             }
-        ]),
+        ],
+        scope_types=['system']),
 ]