← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1347732] Re: Panel role permissions not working as expected

 

The attribute 'permissions' pertains to only the
:class:`~horizon.Dashboard` and :class:`~horizon.Panel` classes. Its not
supported in :class:`~horizon.PanelGroup'` class.

Provided, its value should be a tuple of roles, all of which a user must
possess in order to access any view associated with the corresponding
Dashboard or Panel.

If you intend to restrict access to just a single role, specify just
that as a single valued tuple.

** Changed in: horizon
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1347732

Title:
  Panel role permissions not working as expected

Status in OpenStack Dashboard (Horizon):
  Invalid

Bug description:
  I have created a new role as "company_project_admin" and have
  specified the same in keystone policy.json

  In project dashboard i have added a custom panel as stated in
  http://docs.openstack.org/developer/horizon/quickstart.html#panel-
  classes

  class IdentityPanels(horizon.PanelGroup):
      slug = "identity"
      name = _("Identity")
      panels = ('projects','users')
      permissions = ('openstack.roles.company_project_admin','openstack.roles.admin')

  I see that even user with _member_ role is able to see the images
  panel. Expecting only admin and  company_project_admin role to see the
  images panel. Am i missing something here?

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1347732/+subscriptions


References