openstack/openstack-ansible-os_cinder
Code Issues Proposed changes

Update paste, policy and rootwrap configurations 2017-02-02

Browse Source 
Change-Id: I7c461529573c0d820ffa4e82d5190b4ead4aecee
This commit is contained in:
Andy McCrae 2017-02-02 15:15:46 +00:00
parent 492e2394d4
commit b1de1e06dc
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
files/rootwrap.d/volume.filters
View File

@ -222,3 +222,7 @@ ploop: CommandFilter, ploop, root
# initiator/connector.py: # initiator/connector.py:
drv_cfg: CommandFilter, /opt/emc/scaleio/sdc/bin/drv_cfg, root, /opt/emc/scaleio/sdc/bin/drv_cfg, --query_guid drv_cfg: CommandFilter, /opt/emc/scaleio/sdc/bin/drv_cfg, root, /opt/emc/scaleio/sdc/bin/drv_cfg, --query_guid
# cinder/volume/drivers/quobyte.py
getfattr: CommandFilter, getfattr, root
mount.quobyte: CommandFilter, getfattr, root

1
templates/policy.json.j2
View File

@ -5,6 +5,7 @@
"admin_api": "is_admin:True or (role:admin and is_admin_project:True)", "admin_api": "is_admin:True or (role:admin and is_admin_project:True)",
"volume:create": "", "volume:create": "",
"volume:create_from_image": "",
"volume:delete": "rule:admin_or_owner", "volume:delete": "rule:admin_or_owner",
"volume:force_delete": "rule:admin_api", "volume:force_delete": "rule:admin_api",
"volume:get": "rule:admin_or_owner", "volume:get": "rule:admin_or_owner",