oslo.policy

History

Lance Bragstad 5dc2ab7bcd Add configuration option for enforcing scope

A previous patch made it so that oslo.policy's ``enforce()`` method
compares the context of the request to the ``scope_types`` of the
policy being evaluated:

  I7fa171d859d82939511f8279e4e9464f792ed2cd

After consuming the change across various projects, it became
apparent that we would be duplicating configuration options in each
project in order for operators to opt into this functionality.

This commit adds a new configuration option that is meant to replace
the kwarg that was introduced in a previous patch. This will make things
more consistent for operators as they fix RBAC across their
deployment. It will also make it easier for other OpenStack services
to consumes the new scope_types enforcement.

bp add-scope-to-policy

Change-Id: Ia573b8cac3bf9cee2962790589dea24c7f530ef5

2017-12-20 17:05:02 +00:00

locale/en_GB/LC_MESSAGES

Imported Translations from Zanata

2017-10-08 06:46:40 +00:00

tests

Add configuration option for enforcing scope

2017-12-20 17:05:02 +00:00

__init__.py

exported from oslo-incubator by graduate.sh

2014-12-09 14:40:01 -03:00

_cache_handler.py

Add missing parameter description in module _cache_handler