openstack/neutron
Code Issues Proposed changes

Merge "[S-RBAC] Fix policies for local_ip_association"

Browse Source
This commit is contained in:
Zuul
2025-10-07 18:47:21 +00:00
committed by Gerrit Code Review
parent d7e80423fd 8ff3d9d52a
commit e1d337e15f
2 changed files with 5 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
neutron/conf/policies/local_ip_association.py
View File

@@ -27,9 +27,7 @@ DEPRECATION_REASON = (
rules = [
policy.DocumentedRuleDefault(
name='create_local_ip_port_association',
check_str=neutron_policy.policy_or(
base.ADMIN_OR_PROJECT_MEMBER,
base.PARENT_OWNER_MEMBER),
check_str=base.ADMIN_OR_PARENT_OWNER_MEMBER,
scope_types=['project'],
description='Create a Local IP port association',
operations=[
@@ -46,9 +44,7 @@ rules = [
),
policy.DocumentedRuleDefault(
name='get_local_ip_port_association',
check_str=neutron_policy.policy_or(
base.ADMIN_OR_PROJECT_READER,
base.PARENT_OWNER_READER),
check_str=base.ADMIN_OR_PARENT_OWNER_READER,
scope_types=['project'],
description='Get a Local IP port association',
operations=[
@@ -69,9 +65,7 @@ rules = [
),
policy.DocumentedRuleDefault(
name='delete_local_ip_port_association',
check_str=neutron_policy.policy_or(
base.ADMIN_OR_PROJECT_MEMBER,
base.PARENT_OWNER_MEMBER),
check_str=base.ADMIN_OR_PARENT_OWNER_MEMBER,
scope_types=['project'],
description='Delete a Local IP port association',
operations=[

4
neutron/tests/unit/conf/policies/test_local_ip_association.py
View File

@@ -28,17 +28,17 @@ class LocalIPAssociationAPITestCase(base.PolicyBaseTestCase):
super().setUp()
self.local_ip = {
'id': uuidutils.generate_uuid(),
'tenant_id': self.project_id,
'project_id': self.project_id}
self.alt_local_ip = {
'id': uuidutils.generate_uuid(),
'tenant_id': self.alt_project_id,
'project_id': self.alt_project_id}
self.target = {
'project_id': self.project_id,
'local_ip_id': self.local_ip['id'],
'ext_parent_local_ip_id': self.local_ip['id']}
self.alt_target = {
'project_id': self.alt_project_id,
'local_ip_id': self.alt_local_ip['id'],
'ext_parent_local_ip_id': self.alt_local_ip['id']}