28 Commits

Author	SHA1	Message	Date
郑雨	ba4b9be249	fix: cancel the merge in service level and resource level of Keystone Policy.	2019-11-04 10:44:33 +08:00
Yousong Zhou	8ba5986d83	goimports: first run	2019-10-28 06:22:17 +00:00
Qiu Jian	2c7c817ddc	fix: string2scope ignore user scope	2019-10-11 22:06:05 +08:00
Qiu Jian	a177f8c2af	fix: use policy match weight to override less specific policy	2019-08-23 21:14:47 +08:00
Qiu Jian	c18359def4	fix: role assignments list should include matched policies	2019-07-25 02:26:39 +08:00
Qiu Jian	2dd12cc14f	fix: misc	2019-06-18 10:32:43 +08:00
Qiu Jian	f414d4090a	fix: 1. project add user/group rpc paramter error 2. secgrouprule 403 3.	2019-06-13 14:08:59 +08:00
Qiu Jian	74c6a131a4	fix: numerous incorrect privilege issues	2019-06-06 03:23:03 +08:00
Qiu Jian	292c2a141c	fix: bugs in scope support	2019-06-04 23:27:55 +08:00
Jian Qiu	72c13b8e39	3level priviliges bufixes 20190603 (#1036)	2019-06-03 12:30:58 +08:00
Qiu Jian	d8e492ee5a	misc fixes	2019-05-31 13:56:02 +08:00
Qiu Jian	802b3b0d21	bugfixes	2019-05-31 13:56:02 +08:00
Qiu Jian	b7027934db	feature: 3-level policies, system/domain/project	2019-05-31 13:56:02 +08:00
Qiu Jian	fefdb706f3	fix: the default policy for actions not matching any rule defaults to allow	2019-03-29 20:45:38 +08:00
Qiu Jian	004d9b6f95	update copyright headers of all source	2019-03-29 14:47:48 +08:00
Qiu Jian	cc30b585e0	fix: refine policy match conditions	2019-03-21 10:16:55 +08:00
Qiu Jian	06ae94ebe3	fix: simplify rbac policy condition to match projects and roles	2019-03-21 01:03:51 +08:00
Qiu Jian	d008d47f52	Avoid empty policy rules	2018-12-25 16:31:07 +08:00
Qiu Jian	cdec7fa2b7	改进： 1. policy explain增加name参数，允许针对一个policy进行策略测试。2. ... 将owner，admin统一为allow	2018-12-21 22:02:04 +08:00
Qiu Jian	46aaba2474	make fmt	2018-12-12 23:24:34 +08:00
Qiu Jian	965e84ea36	update	2018-12-07 02:57:58 +08:00
Qiu Jian	4034ee517e	make fmt	2018-11-16 01:43:01 +08:00
Qiu Jian	2734d2f5db	增加user/guest两个权利等级	2018-11-16 01:32:01 +08:00
Qiu Jian	ca0e3977c7	minor fixes	2018-11-15 23:41:04 +08:00
Qiu Jian	1d0ad17e36	fix format	2018-11-08 11:39:48 +08:00
Qiu Jian	388b793490	修正：增加owner级别权限，放置普通用户可以访问系统资源	2018-11-08 01:36:19 +08:00
Qiu Jian	11dddd8ad3	remove slice nil check	2018-10-27 19:12:38 +08:00
Qiu Jian	d0fef591f1	改进：model资源支持rbac认证，需要打开enable_rbac选项，默认关闭。非model资源还不支持	2018-10-27 14:34:09 +08:00