summaryrefslogtreecommitdiffstats
path: root/nova/openstack
diff options
context:
space:
mode:
authorYunhong, Jiang <yunhong.jiang@intel.com>2012-11-15 14:19:57 +0800
committerYunhong, Jiang <yunhong.jiang@intel.com>2012-11-20 21:48:58 +0800
commit3ba1a653d755e2472b23e45f0a698f188fdb18cc (patch)
treec36b516d436f8a6d4d0fed1ade3a7dd71cd4604b /nova/openstack
parent98032e804aa442e1aad17723cab2ed163ee0c810 (diff)
downloadnova-3ba1a653d755e2472b23e45f0a698f188fdb18cc.tar.gz
nova-3ba1a653d755e2472b23e45f0a698f188fdb18cc.tar.xz
nova-3ba1a653d755e2472b23e45f0a698f188fdb18cc.zip
Change all tenants servers listing as policy-based
Currently when list servers from all tenants (i.e. --all-tenants is set as 1 when "nova list"), privilege is required. However, computer pollster in ceilometer need to get all instances from all tenants in one host. Granting admin privilege to the pollster is not very secure. All tenants servers list should be policy-based, instead of requiring admin privelege. There is one potential backward compatibility. With all_tenants specified, non-admin accounts will get back owned servers only without this patch, however it will get policy exception now if policy checking failed. IMHO the new behaviour makes more sense. Change-Id: I8f1f064434ab12b6c0cd636f84dfc1b6a9b2fc90 Signed-off-by: Yunhong, Jiang <yunhong.jiang@intel.com>
Diffstat (limited to 'nova/openstack')
0 files changed, 0 insertions, 0 deletions