Bug 1041966

Summary:	[RFE][horizon]: Implement RBAC support for compute
Product:	Red Hat OpenStack	Reporter:	RHOS Integration <rhos-integ>
Component:	python-django-horizon	Assignee:	RHOS Maint <rhos-maint>
Status:	CLOSED ERRATA	QA Contact:	Ido Ovadia <iovadia>
Severity:	high	Docs Contact:
Priority:	high
Version:	unspecified	CC:	aberezin, ajeain, aortega, jpichon, markmc, mrunge, rdekel, rhos-flags, scohen, slong, yeylon
Target Milestone:	Upstream M2	Keywords:	FutureFeature, Triaged
Target Release:	6.0 (Juno)
Hardware:	Unspecified
OS:	Unspecified
URL:	https://blueprints.launchpad.net/horizon/+spec/compute-rbac
Whiteboard:	upstream_milestone_juno-2 upstream_status_implemented upstream_definition_approved
Fixed In Version:	python-django-horizon-2014.1-5.el7ost	Doc Type:	Enhancement
Doc Text:	Role-based access control (RBAC) checks are now supported for actions that interact with the Compute service (nova); rules are defined in the /etc/openstack-dashboard/nova_policy.json configuration file. RBAC checks allow an administrator to finely tune a user's access. For example, an administrator might allow end users to view the complete flavor listing.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-02-09 14:53:52 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Bug Depends On:
Bug Blocks:	1042006

Description RHOS Integration 2013-12-12 20:20:41 UTC

Cloned from launchpad blueprint https://blueprints.launchpad.net/horizon/+spec/compute-rbac.

Description:

Implement RBAC on actions that interact with the compute service.

Specification URL (additional information):

None

Comment 2 Matthias Runge 2014-05-27 10:45:14 UTC

how to test:
modify /etc/openstack-dashboard/nova_policy.json

No webserver restart required, it should be visible immediately.

Comment 3 Ido Ovadia 2014-08-03 12:54:42 UTC

Matthias,
Can you please give me more information about more actions/ abilities which supported?

Comment 4 Matthias Runge 2014-08-04 16:53:33 UTC

Ido,

there is a list of possible actions to be scanned for availability.

For reference, /etc/openstack-dashboard/nova_policy.json

Comment 5 Ido Ovadia 2014-09-07 14:12:57 UTC

Please review the test plan

Comment 12 errata-xmlrpc 2015-02-09 14:53:52 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2015-0154.html