diff options
| author | Vishvananda Ishaya <vishvananda@gmail.com> | 2013-01-17 12:24:15 -0800 |
|---|---|---|
| committer | Vishvananda Ishaya <vishvananda@gmail.com> | 2013-01-25 11:31:56 -0800 |
| commit | e7bd67b224d7096dfa060e8aaf368661b00b0ab7 (patch) | |
| tree | 23d35dc9c9bfcf5b9ab8929b5b46e5a71060681e /etc | |
| parent | 113880fe1634c78b1b41f2cbb3af3ebccf3727cc (diff) | |
| download | nova-e7bd67b224d7096dfa060e8aaf368661b00b0ab7.tar.gz nova-e7bd67b224d7096dfa060e8aaf368661b00b0ab7.tar.xz nova-e7bd67b224d7096dfa060e8aaf368661b00b0ab7.zip | |
Move policy checks to calling side of rpc.
This prepares to move some of the functionality in the manager
up to the api. We previously did policy checking on the manager
side because quantum v1 was a manager. Now that quantum replaces
the api, we can do the policy checking on the api side.
Change-Id: Id404c66e61044b880dbfb11f7cbba20cbab4b527
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/nova/policy.json | 16 |
1 files changed, 12 insertions, 4 deletions
diff --git a/etc/nova/policy.json b/etc/nova/policy.json index d94ec7192..97ae89a38 100644 --- a/etc/nova/policy.json +++ b/etc/nova/policy.json @@ -102,15 +102,20 @@ "volume_extension:volume_admin_actions:force_delete": "rule:admin_api", - "network:get_all_networks": "", - "network:get_network": "", - "network:delete_network": "", - "network:disassociate_network": "", + "network:get_all": "", + "network:get": "", + "network:create": "", + "network:delete": "", + "network:associate": "", + "network:disassociate": "", "network:get_vifs_by_instance": "", "network:allocate_for_instance": "", "network:deallocate_for_instance": "", "network:validate_networks": "", "network:get_instance_uuids_by_ip_filter": "", + "network:get_instance_id_by_floating_address": "", + "network:setup_networks_on_host": "", + "network:get_backdoor_port": "", "network:get_floating_ip": "", "network:get_floating_ip_pools": "", @@ -121,6 +126,9 @@ "network:deallocate_floating_ip": "", "network:associate_floating_ip": "", "network:disassociate_floating_ip": "", + "network:release_floating_ip": "", + "network:migrate_instance_start": "", + "network:migrate_instance_finish": "", "network:get_fixed_ip": "", "network:get_fixed_ip_by_address": "", |