The policy.v3cloudsample.json policy file attempted to solve
admin-ness issues with elaborate policy checks. These checks are no
longer needed with advent of system scope and incorporating system
scope into keystone APIs.
This commit removes the credential policies from the
policy.v3cloudsample.conf policy file since the new defaults introduce
more flexibility by consuming scope, rendering the policies in
policy.v3cloudsample.conf obsolete. More specific test coverage has
also been added for each new case in
keystone.tests.unit.protection.v3.test_credentials.
Reviewed: https:/ /review. openstack. org/597187 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=7c129f1c70c cc2ee5d68e6fabb 53e3172f9d6a34
Committed: https:/
Submitter: Zuul
Branch: master
commit 7c129f1c70ccc2e e5d68e6fabb53e3 172f9d6a34
Author: Lance Bragstad <email address hidden>
Date: Tue Aug 28 15:44:48 2018 +0000
Remove obsolete credential policies
The policy. v3cloudsample. json policy file attempted to solve
admin-ness issues with elaborate policy checks. These checks are no
longer needed with advent of system scope and incorporating system
scope into keystone APIs.
This commit removes the credential policies from the v3cloudsample. conf policy file since the new defaults introduce v3cloudsample. conf obsolete. More specific test coverage has tests.unit. protection. v3.test_ credentials.
policy.
more flexibility by consuming scope, rendering the policies in
policy.
also been added for each new case in
keystone.
Change-Id: I6c74f40640da23 375574f4a26ee60 779ef08d120
Related-Bug: 1788415