← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1118142] Re: context_is_admin policy can only take roles rules

 

** Changed in: nova
       Status: Fix Committed => Fix Released

** Changed in: nova
    Milestone: None => grizzly-3

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1118142

Title:
  context_is_admin policy can only take roles rules

Status in OpenStack Compute (Nova):
  Fix Released

Bug description:
  branch: master
  commit: ee955d272ab4eef2e8371f2e460454058ce7e46c

  context_is_admin role is used by nova to check if the current user is
  the admin. But it can only take roles rules.

  So a generic rule doesn't work:
     "context_is_admin": "user_name:%(project_name)s"

  It can only accept  rules like this:
     "context_is_admin": "role:admin or role:nova-admin"

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1118142/+subscriptions