will policy.json based implementation be available in next version of openstack
Currenly RBAC policies are stored in policy.json. Is this getting changed to DB anytime soon?
AFAIK its up to you to select what implementation you want to use. Both implementation is already available.
Can you please tell me how to use DB based RBAC ? I can elaborate my question 1. In policy.json(keystone) I am able to define rule called - admin_required 2. Similary I can define rules line custome_role_required 3. Then I can add this rule against each services (like for eg : identity:list_users = custom_role_required How can I use this for DB based RBAC policies? Also there are code like self.policy_api.enforce(context, creds, 'admin_required', {}) in many places (this is in wsgi.py) How can I utilize the same code and at the same time move the policy definition to DB
Sudheesh, Unfortunately i cannot answer this one for you. Using openstack-dev mailing list will be a good option. :)
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev Also don`t forget to read this http://www.catb.org/esr/faqs/smart-questions.html before sending the mail to the list. Hope it helps & closes this question. :D
Asked: 2013-07-30 05:08:45 -0500
Seen: 151 times
Last updated: Aug 12 '13
