summaryrefslogtreecommitdiff
path: root/nova/tests/unit/test_policy.py
diff options
context:
space:
mode:
authorGhanshyam Mann <gmann@ghanshyammann.com>2020-07-23 19:14:36 -0500
committerGhanshyam Mann <gmann@ghanshyammann.com>2020-07-24 00:19:43 +0000
commitcade031eb3b4359987f53083f7df4113f446e0dd (patch)
tree2aa4ccfba64767ae09145fbcce1bbdab5d69e91d /nova/tests/unit/test_policy.py
parent787e359bb152416a53db10357c4146effec302ef (diff)
downloadnova-cade031eb3b4359987f53083f7df4113f446e0dd.tar.gz
Add new default roles in tenant networks policies
This adds new defaults roles in tenant networks API policies. These policies are made granular and default to PROJECT_READER_OR_SYSTEM_READER. Partial implement blueprint policy-defaults-refresh-deprecated-apis Change-Id: I9b7154680b19f76cb97a6c861657ca2f5cad0004
Diffstat (limited to 'nova/tests/unit/test_policy.py')
-rw-r--r--nova/tests/unit/test_policy.py3
1 files changed, 2 insertions, 1 deletions
diff --git a/nova/tests/unit/test_policy.py b/nova/tests/unit/test_policy.py
index 29a67737cd..37cb5e2470 100644
--- a/nova/tests/unit/test_policy.py
+++ b/nova/tests/unit/test_policy.py
@@ -396,7 +396,6 @@ class RealRolePolicyTestCase(test.NoDBTestCase):
"os_compute_api:server-metadata:update_all",
"os_compute_api:os-suspend-server:suspend",
"os_compute_api:os-suspend-server:resume",
-"os_compute_api:os-tenant-networks",
"os_compute_api:extensions",
"os_compute_api:servers:confirm_resize",
"os_compute_api:servers:create",
@@ -458,6 +457,8 @@ class RealRolePolicyTestCase(test.NoDBTestCase):
)
self.system_reader_rules = (
+"os_compute_api:os-tenant-networks:list",
+"os_compute_api:os-tenant-networks:show",
"os_compute_api:servers:migrations:index",
"os_compute_api:servers:migrations:show",
"os_compute_api:os-simple-tenant-usage:list",