openstack/zun
Code Issues Proposed changes

Change quota_class policy to admin only

Browse Source 
This aligns the API behavior to nova, in which the default policy
for getting quota_class is:

  'is_admin:True or quota_class:%(quota_class)s'

Note: the 'quota_class' is unused [1] so this is effectively an
admin-only policy.

[1] https://lists.launchpad.net/openstack/msg12200.html

Change-Id: I5b436086c9594ae217f1a1de021d64e00ac05e38
This commit is contained in:
Hongbin Lu 2018-08-11 20:30:25 +00:00
parent 3d52504f7e
commit 2faeffb3d4
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
zun/common/policies/quota_class.py
View File

@ -30,7 +30,7 @@ rules = [
),
policy.DocumentedRuleDefault(
name=QUOTA_CLASS % 'get',
check_str=base.RULE_ADMIN_OR_OWNER,
check_str=base.RULE_ADMIN_API,
description='List quotas for specific quota class',
operations=[
{