Bug 1041966 - [RFE][horizon]: Implement RBAC support for compute
Summary: [RFE][horizon]: Implement RBAC support for compute
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: python-django-horizon
Version: unspecified
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: Upstream M2
: 6.0 (Juno)
Assignee: RHOS Maint
QA Contact: Ido Ovadia
URL: https://blueprints.launchpad.net/hori...
Whiteboard: upstream_milestone_juno-2 upstream_st...
Depends On:
Blocks: 1042006
TreeView+ depends on / blocked
 
Reported: 2013-12-12 20:20 UTC by RHOS Integration
Modified: 2015-02-09 14:53 UTC (History)
11 users (show)

Fixed In Version: python-django-horizon-2014.1-5.el7ost
Doc Type: Enhancement
Doc Text:
Role-based access control (RBAC) checks are now supported for actions that interact with the Compute service (nova); rules are defined in the /etc/openstack-dashboard/nova_policy.json configuration file. RBAC checks allow an administrator to finely tune a user's access. For example, an administrator might allow end users to view the complete flavor listing.
Clone Of:
Environment:
Last Closed: 2015-02-09 14:53:52 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHEA-2015:0154 0 normal SHIPPED_LIVE python-django-horizon enhancement advisory 2015-02-09 19:52:20 UTC

Description RHOS Integration 2013-12-12 20:20:41 UTC 
Cloned from launchpad blueprint https://blueprints.launchpad.net/horizon/+spec/compute-rbac.

Description:

Implement RBAC on actions that interact with the compute service.

Specification URL (additional information):

None
Comment 2 Matthias Runge 2014-05-27 10:45:14 UTC 
how to test:
modify /etc/openstack-dashboard/nova_policy.json

No webserver restart required, it should be visible immediately.
Comment 3 Ido Ovadia 2014-08-03 12:54:42 UTC 
Matthias,
Can you please give me more information about more actions/ abilities which supported?
Comment 4 Matthias Runge 2014-08-04 16:53:33 UTC 
Ido,

there is a list of possible actions to be scanned for availability.

For reference, /etc/openstack-dashboard/nova_policy.json
Comment 5 Ido Ovadia 2014-09-07 14:12:57 UTC 
Please review the test plan
Comment 12 errata-xmlrpc 2015-02-09 14:53:52 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2015-0154.html
Note You need to log in before you can comment on or make changes to this bug.