openstack/skyline-apiserver
Code Issues Proposed changes

feat(policy): allow creator to view or delete the certificate

Browse Source 
Change-Id: Ie78493c405d6b115ffa64775e6cbd0e8a0adaf7f
Signed-off-by: Sowmya Nethi <sowmya.kamavaram@rackspace.com>
This commit is contained in:
Sowmya Nethi
2025-09-11 17:46:37 +05:30
parent 7d1d125c02
commit de2abda3ce
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
skyline_apiserver/policy/manager/barbican.py
View File

@@ -307,14 +307,14 @@ list_rules = (
),
base.APIRule(
name="container:get",
check_str=("True:%(enforce_new_defaults)s and (rule:container_project_admin or (rule:container_project_member and rule:container_owner) or (rule:container_project_member and rule:container_is_not_private) or rule:container_acl_read)"),
check_str=("True:%(enforce_new_defaults)s and (rule:container_project_admin or (rule:container_project_member and rule:container_owner) or (rule:container_project_member and rule:container_is_not_private) or rule:container_acl_read or rule:creator)"),
description="Retrieves a single container.",
scope_types=["project"],
operations=[Operation(method="GET", path="/v1/containers/{container-id}")],
),
base.APIRule(
name="container:delete",
check_str=("True:%(enforce_new_defaults)s and (rule:container_project_admin or (rule:container_project_member and rule:container_owner) or (rule:container_project_member and rule:container_is_not_private))"),
check_str=("True:%(enforce_new_defaults)s and (rule:container_project_admin or (rule:container_project_member and rule:container_owner) or (rule:container_project_member and rule:container_is_not_private) or rule:creator)"),
description="Deletes a container.",
scope_types=["project"],
operations=[Operation(method="DELETE", path="/v1/containers/{uuid}")],