[openstack-dev] Policy's persistence layer
Kevin L. Mitchell
kevin.mitchell at rackspace.com
Fri May 3 15:12:33 UTC 2013
On Fri, 2013-05-03 at 09:54 +0200, Flavio Percoco wrote:
> 1) The change would be backward compatible.
> 2) It would still support file based RBAC.
> 3) Policy's form wont change. It would still be based on dictionaries
> and it'd be up to storage to de-normalize rules.
> 4) Policies could be imported from a file.
> 5) Policies could be updated using a manage command or by modifying a
> single policy file that is kept updated.
>
> Before digging more into this, I would like to have some feedback from
> you and see if there are some issues not being considered in the above.
I'll just add to this a blueprint I submitted but haven't had a chance
to work on:
https://blueprints.launchpad.net/oslo/+spec/self-documenting-policies
--
Kevin L. Mitchell <kevin.mitchell at rackspace.com>
More information about the OpenStack-dev
mailing list