Public bug reported:

Currently the is_advsvc setting on the Context object is always calculated with 
a policy check [1].
When is_admin is set to True the Context is being explicitly built to have 
admin rights. 
This seems kind of reasonable. It will still be possible to define policies 
when a user with a "advsvc" role can perform operations not even an "admin" can 
do (if that makes any sense).
This just for those contexts which are built inside the business logic to gain 
access to the whole database.

I am not sure if this can be of any practical use - for instance it might serve 
a similar purpose of get_admin_context.
However, it will spare an unnecessary check in the policy engine.
Moreover, It is going to simplify quite a bit implementation of "light" unit 
tests with minimal harness. For instance unit tests which only cover DB 
operations.

[1]
http://git.openstack.org/cgit/openstack/neutron/tree/neutron/context.py#n68

** Affects: neutron
     Importance: Low
     Assignee: Salvatore Orlando (salvatore-orlando)
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1450244

Title:
  In admin context is_advsvc should be True

Status in OpenStack Neutron (virtual network service):
  New

Bug description:
  Currently the is_advsvc setting on the Context object is always calculated 
with a policy check [1].
  When is_admin is set to True the Context is being explicitly built to have 
admin rights. 
  This seems kind of reasonable. It will still be possible to define policies 
when a user with a "advsvc" role can perform operations not even an "admin" can 
do (if that makes any sense).
  This just for those contexts which are built inside the business logic to 
gain access to the whole database.

  I am not sure if this can be of any practical use - for instance it might 
serve a similar purpose of get_admin_context.
  However, it will spare an unnecessary check in the policy engine.
  Moreover, It is going to simplify quite a bit implementation of "light" unit 
tests with minimal harness. For instance unit tests which only cover DB 
operations.

  [1]
  http://git.openstack.org/cgit/openstack/neutron/tree/neutron/context.py#n68

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1450244/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to     : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp

Reply via email to