Bug 1201110

Summary: [RFE][horizon]: DataTable column level permissions
Product: Red Hat OpenStack Reporter: RHOS Integration <rhos-integ>
Component: RFEsAssignee: RHOS Maint <rhos-maint>
Status: CLOSED UPSTREAM QA Contact:
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: unspecifiedCC: markmc, yeylon
Target Milestone: ---Keywords: FutureFeature
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
URL: https://blueprints.launchpad.net/horizon/+spec/datatable-column-level-permissions
Whiteboard: upstream_milestone_none upstream_definition_superseded upstream_status_needs-code-review
Fixed In Version: Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description RHOS Integration 2015-03-12 04:07:32 UTC
Cloned from launchpad blueprint https://blueprints.launchpad.net/horizon/+spec/datatable-column-level-permissions.

Description:

Summary
=======
Add Column-level permissions to DataTable.


Motivation
==========

The need arised when implementing blueprint trove-list-datastores-and-versions.
The table which displays datastores versions must include columns for admins.
Regular users must see only "name" and "ID" whereas an admin will sees 
"name", "ID", "active", "packages" and "image ID".


Description
===========

Be able to filter DataTable's columns depending user permissions.
Thus we can easily display admin only columns.

This is *not only* about hiding columns.

For instance, some data are not available to regular users in API responses.
So when a user does not have the permissions we must ignore the columns as if
they were not defined.

basic example
-------------

class MyTable(tables.DataTable):

    column = tables.Column(...)
    admin_only_column = tables.Column(...,
                                      permissions=['openstack.roles.admin'])    

Only a admin would see the second column.
Regular users would see only the first.


concrete example
----------------

See the following files in https://review.openstack.org/#/c/163196/:

 * DataTable patch: horizon/tables/base.py
 * Usage: database_datastores/tables.py

UX
==

None

Testing
=======

When a DataTable is rendered to a user who has not the permissions to view a 
column, we must ensure that:

 * The column is not showed
 * The column data is not processed
 

Outside Dependencies
====================

None

Requirements Update Required
============================

None

Doc Impact
==========

Document how to filter DataTable columns thanks to the new argument:
``permissions``.


Specification URL (additional information):

None