Thursday, 2016-12-15

*** masahito has joined #congress00:02
*** thinrichs has quit IRC00:02
*** thinrichs has joined #congress00:03
ekcsmasahito: I didn’t totally understand the question.01:02
ekcsmasahito: you mean can a non-global admin write rules?01:03
ekcsmasahito: or are there different levels of rules for global vs non-global admins?01:03
masahitoekcs: I means the rule written by a user could affect all tenant.01:03
masahitofor example:01:04
masahitowhen user1 in tenant1 writes a rule like rule1(x):- nova:servers(id=x), rule1 gets all servers in the Nova01:05
masahitomeaning rule1 also shows servers in tenant2, tenant3 and so on.01:06
ekcsmasahito: right. afaik there is only one global context for all rules.01:06
ekcsso supporting tenants writing their on separate policies would require a lot of thought and design and changes.01:06
ekcson how things interact and all.01:06
ekcsone possible solution is that each tenant/project has their own restricted view (helper table) into each base table.01:08
ekcslots of practical and technical complexities to think through for sure.01:08
masahitothe possible solution makes sense.01:09
ekcsthere is some prior work to draw on in the database literature though.01:10
masahitoand I thought we just write project's dashboard without any validation. so I just commented.01:10
ekcsbut anyway I guess the answer is that right now congress doesn’t have any particular support for multi-tenant policies.01:10
masahitothanks to be clarified.01:12
ekcs= )01:15
ekcslot of good further discussion to be had on this topic!01:15
*** thinrichs has quit IRC02:03
*** masahito has quit IRC02:36
openstackgerritOpenStack Proposal Bot proposed openstack/congress: Updated from global requirements
openstackgerritOpenStack Proposal Bot proposed openstack/python-congressclient: Updated from global requirements
*** ramineni_ has quit IRC04:09
*** masahito has joined #congress04:11
*** ramineni_ has joined #congress04:21
*** thinrichs has joined #congress04:28
*** thinrichs has quit IRC04:48
*** thinrichs has joined #congress04:54
*** ramineni_ has quit IRC04:55
*** thinrichs has quit IRC05:26
*** masahito has quit IRC08:01
*** masahito has joined #congress09:04
*** masahito has quit IRC09:24
*** openstackgerrit has quit IRC10:18
*** evrardjp has quit IRC12:08
*** evrardjp has joined #congress12:13
*** masahito has joined #congress14:47
*** masahito has quit IRC15:36
*** thinrichs has joined #congress15:42
*** thinrichs has quit IRC16:13
*** thinrichs has joined #congress16:33
*** thinrichs has quit IRC20:06
*** thinrichs has joined #congress20:06
*** thinrichs has quit IRC20:45
*** thinrichs has joined #congress20:51
*** ekcs has quit IRC21:04
*** thinrichs has quit IRC21:15
*** thinrichs1 has joined #congress21:15
*** thinrichs1 has quit IRC21:22
*** thinrichs has joined #congress21:54
*** thinrichs has quit IRC22:06
*** ekcs has joined #congress23:13
*** thinrichs has joined #congress23:28
*** thinrichs has quit IRC23:29
*** thinrichs has joined #congress23:29
*** thinrichs has quit IRC23:58
*** thinrichs has joined #congress23:59

Generated by 2.14.0 by Marius Gedminas - find it at!