Re: [Openstack-operators] Better error messages for API policy enforcements

2015-12-03 Thread Andrew Laski
On 12/02/15 at 03:24pm, Robert Starmer wrote: I can't think of a case where better error response and log messages are not useful/desired. I agree with this, but I don't think that custom error messages defined in policy.json are the way to go. The API response should be standard across depl

Re: [Openstack-operators] Better error messages for API policy enforcements

2015-12-02 Thread Robert Starmer
I can't think of a case where better error response and log messages are not useful/desired. Robert On Wed, Dec 2, 2015 at 2:39 PM, Mike Dorman wrote: > We use some custom API policies (as in policy.json) to restrict certain > operations to particular roles or requiring some fields on calls (i.

[Openstack-operators] Better error messages for API policy enforcements

2015-12-02 Thread Mike Dorman
We use some custom API policies (as in policy.json) to restrict certain operations to particular roles or requiring some fields on calls (i.e. we require that users give us an availability zone when booting an instance.) When the policy causes the operation to be denied, the only response that g