<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 05/06/2015 06:54 PM, Hu, David J
(Converged Cloud) wrote:<br>
</div>
<blockquote
cite="mid:DFA42BDE98AA8047AACB285121AB183885BDC8DF@G4W3228.americas.hpqcorp.net"
type="cite"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#843C0C;mso-style-textfill-fill-color:#843C0C;mso-style-textfill-fill-alpha:100.0%"><span
style="color:windowtext">david8hu> One of the first thing
we have to do is get all of our glossary straight </span></span><span
style="font-size:11.0pt;font-family:Wingdings;color:#843C0C;mso-style-textfill-fill-color:#843C0C;mso-style-textfill-fill-alpha:100.0%"><span
style="color:windowtext">J</span></span><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#843C0C;mso-style-textfill-fill-color:#843C0C;mso-style-textfill-fill-alpha:100.0%"><span
style="color:windowtext"> I am starting to hear about
“capability”. Are we talking about “rule” in oslo policy
terms? Or “action” in nova policy terms? Or this is something
new. For example, “compute:create_instance” is a “rule” in
oslo.policy enforce(…) definition, “compute:create_instance”
is an “action” in nova.policy enforce(…) definition.</span></span></blockquote>
<br>
By capability, I ( think I ) mean Action in Nova terms, as I am
trying to exclude the internal rules that policy lets you define.
However, to further muddy the water, you can actually enforce on one
of these rules./ For example, the Keystone server enforces on
"admin_required" for the V2 API.<br>
<br>
The term capability has been thrown around a few times and I picked
it up. Really what I want to delineate is the point in the code at
which policy gets enforced.<br>
</body>
</html>