]> review.fuel-infra Code Review - openstack-build/cinder-build.git/commit
Relax policy so owner can access encryption info
authorJoel Coffman <joel.coffman@jhuapl.edu>
Tue, 20 Aug 2013 17:02:24 +0000 (13:02 -0400)
committerJoel Coffman <joel.coffman@jhuapl.edu>
Tue, 20 Aug 2013 18:02:08 +0000 (14:02 -0400)
commit51fc2bd41e236404a8db8e4beefd0ec265fb1a5a
tree18f678c12200ed53d96ea1888c49efdc1030b8e5
parent08b6480ca8f9ff9c8bd1a20e2660ac8cfecb4c53
Relax policy so owner can access encryption info

The admin only policy is too restrictive to allow Nova to access a
volume's encryption metadata using the owner's request context. Hence,
this commit relaxes the policy for the volume encryption metadata
API extension so the metadata is accessible to the volume's owner.

Implements: blueprint encrypt-cinder-volumes
Change-Id: Ia946850b79f7f717ab7528caf7cac2905e650917
SecurityImpact
cinder/api/contrib/volume_type_encryption.py
cinder/db/sqlalchemy/api.py
cinder/tests/api/contrib/test_volume_encryption_metadata.py
cinder/tests/policy.json
etc/cinder/policy.json