API: Remove scope checks from policy rules
The current admin_or_owner policy check is meaningless because the default target is the project_id and user_id from context.
This spec looks at fixing that.
Blueprint information
- Status:
- Not started
- Approver:
- None
- Priority:
- Undefined
- Drafter:
- John Garbutt
- Direction:
- Needs approval
- Assignee:
- None
- Definition:
- New
- Series goal:
- None
- Implementation:
-
Unknown
- Milestone target:
- None
- Started by
- Completed by
Related branches
Related bugs
Sprints
Whiteboard
Gerrit topic: https:/
Addressed by: https:/
Add policy-
Gerrit topic: https:/
Addressed by: https:/
Add polcy-docs spec
Addressed by: https:/
POC: improved policy functional tests
Addressed by: https:/
POC: add context.check_scope
Gerrit topic: https:/
Addressed by: https:/
New intro
We're now past the spec freeze for the Pike release so I'm going to untarget this for Pike. I expect we'll be discussing RBAC related items at the Boston summit, so maybe we can figure out some incremental steps forward for Queens. -- mriedem 20170418
