[openstack-dev] [nova] Server Group API: add 'action' to authorizer?

Christopher Yeoh cbkyeoh at gmail.com
Sat Aug 23 10:29:19 UTC 2014

On Sat, 23 Aug 2014 03:56:27 -0500
Joe Cropper <cropper.joe at gmail.com> wrote:

> Hi Folks,
> Would anyone be opposed to adding the 'action' checking to the v2/v3
> authorizers?  This would allow administrators more fine-grained
> control over  who can read vs. create/update/delete server groups.
> Thoughts?
> If folks are supportive, I'd be happy to add this... but not sure if
> we'd treat this as a 'bug' or whether there is a blueprint under which
> this could be done?

Long term we want to have a separate authorizer for every method. Alex
had a nova-spec  proposed for this but it unfortunately did not make


Also since the feature proposal deadline has passed it'll have to wait
till Kilo.


More information about the OpenStack-dev mailing list