Policy enforcement library
Unify the enforcement of policy for services in keystone middleware. Fetch the policy file from the Keystone server.
Blueprint information
- Status:
- Complete
- Approver:
- None
- Priority:
- Undefined
- Drafter:
- Rodrigo Duarte
- Direction:
- Needs approval
- Assignee:
- Rodrigo Duarte
- Definition:
- Superseded
- Series goal:
- None
- Implementation:
-
Unknown
- Milestone target:
- None
- Started by
- Completed by
- Samuel de Medeiros Queiroz
Related branches
Related bugs
Sprints
Whiteboard
Gerrit topic: https:/
Addressed by: https:/
Policy enforcement library
Gerrit topic: https:/
(stevemar 16-02-02) this should be a cross-project specification
samueldmq on 2016-08-18:
Distributing the policies dinamically does not reflect our priorities or goals in keystone
anymore. Adam Young is working on getting this dynamic delivery of Policies done by using
TripleO (this is why I am marking this as superseded. For now, there is no intention on going
with this in keystone anymore. This blueprint can be restored or another one may be created
in the case this turns to become a need again.
Perhaps making the common enforcement in keystonemiddleware (the roles check only) is
something doable, but as pointed out by Steve, this would need to be a cross-project spec.
This is related to https:/
