commit 87f57c0a2cc00a70edc87c5dc10bdefb6c01587b
Author: Andrew Laski <email address hidden>
Date: Thu Mar 20 19:04:09 2014 -0400
Add RBAC policy for ec2 API security groups calls
The revoke_security_group_ingress, revoke_security_group_ingress, and
delete_security_group calls in the ec2 API were not restricted by policy
checks. This prevented a deployer from restricting their usage via
roles or other checks. Checks have been added for these calls.
Closes-Bug: #1290537
Change-Id: I4bf681bedd68ed2216b429d34db735823e0a6189
(cherry picked from commit d4056f8723cc6cefb28ff6e5a7c0df5ea77f82ef)
Reviewed: https:/ /review. openstack. org/86360 /git.openstack. org/cgit/ openstack/ nova/commit/ ?id=87f57c0a2cc 00a70edc87c5dc1 0bdefb6c01587b
Committed: https:/
Submitter: Jenkins
Branch: milestone-proposed
commit 87f57c0a2cc00a7 0edc87c5dc10bde fb6c01587b
Author: Andrew Laski <email address hidden>
Date: Thu Mar 20 19:04:09 2014 -0400
Add RBAC policy for ec2 API security groups calls
The revoke_ security_ group_ingress, revoke_ security_ group_ingress, and security_ group calls in the ec2 API were not restricted by policy
delete_
checks. This prevented a deployer from restricting their usage via
roles or other checks. Checks have been added for these calls.
Closes-Bug: #1290537 2216b429d34db73 5823e0a6189 fb28ff6e5a7c0df 5ea77f82ef)
Change-Id: I4bf681bedd68ed
(cherry picked from commit d4056f8723cc6ce