armada/armada
Felipe Monteiro e573cf1ad5 fix: Use superior oslo.policy authorize over enforce
`oslo.policy` supports both enforce and authorize. authorize is
stricter because it'll raise an exception if the policy action is
not found in the list of registered rules. This means that attempting
to enforce anything not found in ``armada.common.policies`` will error
out with a 'Policy not registered' message and 403 status code.

This problem manifests itself through such cases: [0]

Please reference the oslo.policy docs on authorize [1] and
enforce [2] to better understand the discrepancy between the
two.

[0] https://review.openstack.org/#/c/610117/1
[1] feac3dcbfe/oslo_policy/policy.py (L960)
[2] feac3dcbfe/oslo_policy/policy.py (L792)

Change-Id: I5b0a28a2b5fb4dff150f13a56013a7a9b694c756
2018-10-15 20:24:51 +01:00
..
api fix: Fix controller enforcing a nonexistent policy 2018-10-12 18:07:12 +01:00
cli Add chart API to wait on k8s resource types/labels 2018-10-05 16:48:32 -05:00
common fix: Use superior oslo.policy authorize over enforce 2018-10-15 20:24:51 +01:00
conf Parallelize unsequenced chart group deployments 2018-10-03 10:27:49 -05:00
exceptions Add chart API to wait on k8s resource types/labels 2018-10-05 16:48:32 -05:00
handlers Add chart API to wait on k8s resource types/labels 2018-10-05 16:48:32 -05:00
schemas Add chart API to wait on k8s resource types/labels 2018-10-05 16:48:32 -05:00
tests fix: Use superior oslo.policy authorize over enforce 2018-10-15 20:24:51 +01:00
utils Merge "Fix: various documentation and URL fixes" 2018-09-24 14:13:15 +00:00
__init__.py fix(init): remove duplicated version code 2018-05-28 05:52:58 -05:00
const.py Changing default timeout from 3600 to 900 seconds, when timeout is unspecified. 2018-07-02 13:27:18 -05:00
errors.py Adding yapf config, plus formatted code. 2018-06-22 14:56:04 -05:00
shell.py Adding yapf config, plus formatted code. 2018-06-22 14:56:04 -05:00
version.py Fix(linting): Make Armada pep8 compliant 2017-09-29 11:46:58 -04:00