summaryrefslogtreecommitdiffstats
path: root/keystone/policy
diff options
context:
space:
mode:
authorJenkins <jenkins@review.openstack.org>2012-11-20 18:08:32 +0000
committerGerrit Code Review <review@openstack.org>2012-11-20 18:08:32 +0000
commit55b90e303be552817fd716ab860c80f8c3ee74d0 (patch)
tree1d01ce3cf9162d6c2ca01cda607f5dc3ee8404ce /keystone/policy
parent64452c6b55dd3b0320d0ebdd1dc2f4d122c00b2e (diff)
parentc74009025f097a6a8743cc4e20a70dd29a6e558d (diff)
downloadkeystone-55b90e303be552817fd716ab860c80f8c3ee74d0.tar.gz
keystone-55b90e303be552817fd716ab860c80f8c3ee74d0.tar.xz
keystone-55b90e303be552817fd716ab860c80f8c3ee74d0.zip
Merge "tweaking docs to fix link to wiki Keystone page"
Diffstat (limited to 'keystone/policy')
-rw-r--r--keystone/policy/backends/rules.py16
1 files changed, 8 insertions, 8 deletions
diff --git a/keystone/policy/backends/rules.py b/keystone/policy/backends/rules.py
index 92a90efa..c0df430e 100644
--- a/keystone/policy/backends/rules.py
+++ b/keystone/policy/backends/rules.py
@@ -79,20 +79,20 @@ def enforce(credentials, action, target):
"""Verifies that the action is valid on the target in this context.
:param credentials: user credentials
- :param action: string representing the action to be checked
-
- this should be colon separated for clarity.
- i.e. compute:create_instance
- compute:attach_volume
- volume:attach_volume
-
+ :param action: string representing the action to be checked, which
+ should be colon separated for clarity.
:param target: dictionary representing the object of the action
for object creation this should be a dictionary
representing the location of the object e.g.
{'tenant_id': object.tenant_id}
-
:raises: `exception.Forbidden` if verification fails.
+ Actions should be colon separated for clarity. For example:
+
+ * compute:create_instance
+ * compute:attach_volume
+ * volume:attach_volume
+
"""
init()