These changes are necessary so policy files can in include the check "is_admin_project:True" which allows us to Scope what is meant by "Admin" Use from_environ to load context Use to_policy_values for enforcing policy Use context from_environ to load contexts Use from_dict to load context params https://review.openstack.org/340206 <https://review.openstack.org/340206> https://review.openstack.org/340205 <https://review.openstack.org/340205> https://review.openstack.org/340195 <https://review.openstack.org/340195> https://review.openstack.org/340194 <https://review.openstack.org/340194> Let's please get them merged. This will improve RBAC for all of the services. It looks like there are a handful for Cue as well: Use oslo.context's from_environ to create context Use standard to_policy_values for policy enforcement Explicitly load context attributes in from_dict https://review.openstack.org/#/c/345694/ https://review.openstack.org/#/c/345695/ https://review.openstack.org/#/c/345693/ Try to go light on the testing requirements in review feedback, as Jamie is working tio make this happen across a lot of projects. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20160818/6f7f675a/attachment.html>