c4618857b0
This patch should finally complete phase 1 of Secure RBAC community goal [1] where it was agreed that there will be just 4 personas: * ADMIN * PROJECT_ADMIN * PROJECT_MEMBER * PROJECT_READER System scope personas will be added in next phases of the community goal. To complete phase 1 in Neutron, this patch removes hardcoded system scope from the check strings in system scope personas - that way it can be controlled by the config option and enforced by oslo_policy only when enabled. It also skips all SYSTEM_MEMBER and SYSTEM_READER related unit tests. We can re-enable them in the future where we will have those personas working in Neutron. [1] https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#phase-1 Change-Id: Iafa8ec1d9710ff404450ad0a64baf56a0f993756
OpenStack Neutron
Neutron is an OpenStack project to provide "network connectivity as a service" between interface devices (e.g., vNICs) managed by other OpenStack services (e.g., Nova).
To learn more about neutron:
- Documentation: https://docs.openstack.org/neutron/latest/
- Features: https://specs.openstack.org/openstack/neutron-specs
- Defects: https://launchpad.net/neutron
- Release notes: https://docs.openstack.org/releasenotes/neutron/index.html
- Source: https://opendev.org/openstack/neutron
Get in touch via email. Use [Neutron] in your subject.
To learn how to contribute, please read the CONTRIBUTING.rst file.