from neutron.extensions import portsecurity as psec
from neutron.extensions import securitygroup as ext_sg
from neutron.manager import NeutronManager
-from neutron import policy
from neutron.tests.unit import test_db_plugin
DB_PLUGIN_KLASS = ('neutron.tests.unit.test_extension_portsecurity.'
"""
supported_extension_aliases = ["security-group", "port-security"]
- port_security_enabled_create = "create_port:port_security_enabled"
- port_security_enabled_update = "update_port:port_security_enabled"
-
- def _enforce_set_auth(self, context, resource, action):
- return policy.enforce(context, action, resource)
def create_network(self, context, network):
tenant_id = self._get_tenant_id_for_create(context, network['network'])
return self._fields(net, fields)
def create_port(self, context, port):
- if attr.is_attr_set(port['port'][psec.PORTSECURITY]):
- self._enforce_set_auth(context, port,
- self.port_security_enabled_create)
p = port['port']
with context.session.begin(subtransactions=True):
p[ext_sg.SECURITYGROUPS] = self._get_security_groups_on_port(
return port['port']
def update_port(self, context, id, port):
- self._enforce_set_auth(context, port,
- self.port_security_enabled_update)
delete_security_groups = self._check_update_deletes_security_groups(
port)
has_security_groups = self._check_update_has_security_groups(port)