Enable extension level policy rule as default of action level policy rule for v3 api

Registered by Alex Xu

If we provide policy rule for each api in this bp https://blueprints.launchpad.net/nova/+spec/separated-policy-rule-v3-api
There will be a lot of policy for operator to config. So we can provide two level policy rule for an extension.

extension level: compute_extension:v3:[extension]
action level: compute_extension:v3:[extension]:[action]

If all the policy rule is same in an extension, operator just need specific an extension level policy rule. Then extension level policy rule will apply to each API in this extension. If operator want to change one api in that extension, operator only need add one action level policy rule that override the extension level policy rule. This way ease the maintenance burden of policy rule for operator.

Blueprint information

Status:
Not started
Approver:
None
Priority:
Undefined
Drafter:
Alex Xu
Direction:
Needs approval
Assignee:
Alex Xu
Definition:
New
Series goal:
None
Implementation:
Unknown
Milestone target:
None

Related branches

Sprints

Whiteboard

Gerrit topic: https://review.openstack.org/#q,topic:bp/is,n,z

Addressed by: https://review.openstack.org/92325
    Enable extension policy rule as default of action policy rule for v3 api

Gerrit topic: https://review.openstack.org/#q,topic:bp/propose,n,z

Spec not approved yet, un-targeting blueprint from juno-1 --johnthetubaguy (28th May 2014)

(?)

Work Items

Dependency tree

* Blueprints in grey have been implemented.

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.