There has been a lot of talk about Policy this past summit and release.
Based on feedback, we've come up with the following spec to address it.
https://review.openstack.org/#/c/391624/
The idea is that we are going to split the role check off from the
existing policy checks. The role check will happen at token validation
time. The existing policy checks will still be executed in the body of
the code bases where they are now, as they confirm additional attributes
about the operations and resources.
It is the amalgamation of work by many people, and I've attempted to
list them all at the bottom.
Comments highly appreciated, either in the review or in this thread.
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
