Files
nova/nova
Ghanshyam Mann 4ecec2ff73 Pass the actual target in security_groups policy
Currently if target is not passed in context.can(),
it use defauls target which is context.user_id, context.project_id.
These defaults target are not useful as it pass the
context's user_id and project_id only which means we tell
oslo policy to verify the context data with context data.

This commit pass the actual target for networks policies
which is context.project_id itself as nova cannot verify the owner of
security_groups. Neutron will return the authorise error is requester
is not owner of security_group.

Partial implement blueprint policy-defaults-refresh-deprecated-apis

Change-Id: I1ce8ad8a16bddb3f7520a3b4e323b75626928186
2020-07-24 01:23:30 +00:00
..
2020-05-08 14:45:54 +01:00
2020-05-19 08:09:43 +08:00
2020-04-26 07:51:21 +00:00
2020-05-27 09:40:47 +00:00
2020-05-27 09:40:47 +00:00
2020-07-08 15:12:21 +01:00