[openstack-dev] Policy's persistence layer

Kevin L. Mitchell kevin.mitchell at rackspace.com
Fri May 3 15:12:33 UTC 2013


On Fri, 2013-05-03 at 09:54 +0200, Flavio Percoco wrote:
> 1) The change would be backward compatible.
> 2) It would still support file based RBAC.
> 3) Policy's form wont change. It would still be based on dictionaries
> and it'd be up to storage to de-normalize rules.
> 4) Policies could be imported from a file.
> 5) Policies could be updated using a manage command or by modifying a
> single policy file that is kept updated.
> 
> Before digging more into this, I would like to have some feedback from
> you and see if there are some issues not being considered in the above.

I'll just add to this a blueprint I submitted but haven't had a chance
to work on:

        https://blueprints.launchpad.net/oslo/+spec/self-documenting-policies
-- 
Kevin L. Mitchell <kevin.mitchell at rackspace.com>




More information about the OpenStack-dev mailing list