x/vmware-nsx
Code Issues Proposed changes

Pass object to policy when finding fields to strip

Browse Source 
During the evaluation of fields to strip in responses to list
operations, pass also the first object in the list to the
policy engine.
This will avoid errors in policy evaluation if during
an upgrade from icehouse policy.json was not updated to remove
attribute-level policies dependent on resource values.

Closes-Bug: #1323715

Change-Id: Iaa6ed3bbf4a07ce0b614a4197cabdfa1cb36d427
This commit is contained in:
Salvatore Orlando 2014-06-02 03:14:02 -07:00 committed by Jakub Libosvar
parent aecae0751b
commit 9b951dbe0f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
neutron/api/v2/base.py
View File

@ -141,7 +141,7 @@ class Controller(object):
if policy.check( if policy.check(
context, context,
'%s:%s' % (self._plugin_handlers[self.SHOW], attr_name), '%s:%s' % (self._plugin_handlers[self.SHOW], attr_name),
None, data,
might_not_exist=True): might_not_exist=True):
# this attribute is visible, check next one # this attribute is visible, check next one
continue continue