Pass object to policy when finding fields to strip
During the evaluation of fields to strip in responses to list operations, pass also the first object in the list to the policy engine. This will avoid errors in policy evaluation if during an upgrade from icehouse policy.json was not updated to remove attribute-level policies dependent on resource values. Closes-Bug: #1323715 Change-Id: Iaa6ed3bbf4a07ce0b614a4197cabdfa1cb36d427
This commit is contained in:
parent
aecae0751b
commit
9b951dbe0f
@ -141,7 +141,7 @@ class Controller(object):
|
||||
if policy.check(
|
||||
context,
|
||||
'%s:%s' % (self._plugin_handlers[self.SHOW], attr_name),
|
||||
None,
|
||||
data,
|
||||
might_not_exist=True):
|
||||
# this attribute is visible, check next one
|
||||
continue
|
||||
|
Loading…
Reference in New Issue
Block a user