From 555c9df65f4576acbeed3f6d6bc903f2cbe1b0da Mon Sep 17 00:00:00 2001 From: Davanum Srinivas Date: Mon, 9 Nov 2015 08:04:25 -0500 Subject: [PATCH] Add missing policy rules Added a LOG.info nova.policy:enforce method to print what exactly we are testing in our gate jobs (see I62d8572e36b8ebb5ece218d858679e93ca0f8c7e) and found these two rules were missing. Change-Id: I94780b5173a72c93cf3f7e0dabd429f40fcda46f --- etc/nova/policy.json | 2 ++ nova/tests/unit/test_policy.py | 2 ++ 2 files changed, 4 insertions(+) diff --git a/etc/nova/policy.json b/etc/nova/policy.json index 5f6023e5c388..fcf6f1e600db 100644 --- a/etc/nova/policy.json +++ b/etc/nova/policy.json @@ -334,6 +334,7 @@ "os_compute_api:os-extended-availability-zone": "", "os_compute_api:os-extended-availability-zone:discoverable": "", "os_compute_api:extensions": "", + "os_compute_api:extensions:discoverable": "", "os_compute_api:extension_info:discoverable": "", "os_compute_api:os-extended-volumes": "", "os_compute_api:os-extended-volumes:discoverable": "", @@ -345,6 +346,7 @@ "os_compute_api:os-flavor-access:add_tenant_access": "rule:admin_api", "os_compute_api:os-flavor-rxtx": "", "os_compute_api:os-flavor-rxtx:discoverable": "", + "os_compute_api:flavors": "", "os_compute_api:flavors:discoverable": "", "os_compute_api:os-flavor-extra-specs:discoverable": "", "os_compute_api:os-flavor-extra-specs:index": "", diff --git a/nova/tests/unit/test_policy.py b/nova/tests/unit/test_policy.py index a99f79a04c49..9688726d43b5 100644 --- a/nova/tests/unit/test_policy.py +++ b/nova/tests/unit/test_policy.py @@ -464,6 +464,7 @@ class RealRolePolicyTestCase(test.NoDBTestCase): "compute_extension:os-tenant-networks", "network:get_vif_by_mac_address", "os_compute_api:extensions", +"os_compute_api:extensions:discoverable", "os_compute_api:os-config-drive", "os_compute_api:os-quota-sets:defaults", "os_compute_api:servers:confirm_resize", @@ -617,6 +618,7 @@ class RealRolePolicyTestCase(test.NoDBTestCase): "os_compute_api:os-flavor-access:discoverable", "os_compute_api:os-flavor-rxtx", "os_compute_api:os-flavor-rxtx:discoverable", +"os_compute_api:flavors", "os_compute_api:flavors:discoverable", "os_compute_api:os-flavor-extra-specs:discoverable", "os_compute_api:os-flavor-extra-specs:index",