Friday, 2020-04-17

*** dayou has quit IRC01:38
*** dayou has joined #openstack-barbican01:47
*** dayou has quit IRC05:10
*** Anticimex has quit IRC05:10
*** tinwood has quit IRC05:10
*** dayou has joined #openstack-barbican05:15
*** Anticimex has joined #openstack-barbican05:15
*** tinwood has joined #openstack-barbican05:15
*** dayou has quit IRC05:54
*** dayou has joined #openstack-barbican05:55
*** xek has joined #openstack-barbican06:36
*** msciciel has joined #openstack-barbican07:10
mscicielHi,I have a question about policy for container consumers. Am I correctly understand that below policy in the code should allow user with read acl to create consumer for container?    policy.DocumentedRuleDefault(        name='consumers:post',        check_str='rule:admin or rule:container_non_private_read or ' +07:18
msciciel'rule:container_project_creator or ' +                  'rule:container_project_admin or rule:container_acl_read',        scope_types=[],        description='Creates a consumer.',        operations=[            {                'path': '/v1/containers/{container-id}/consumers',                'method': 'POST'            }        ]    ),07:18
mscicielpolicy.RuleDefault(        name='container_acl_read',        check_str="'read':%(target.container.read)s"),It's not working for me and I wonder if I'm doing something wrong or it's designed to work other way. My current solution is below policy to allow role 'creator' to update consumers:{"consumers:post": "rule:admin or rule:creator or07:18
mscicielrule:container_non_private_read or rule:container_project_creator or rule:container_project_admin or rule:container_acl_read"}07:18
*** tosky has joined #openstack-barbican07:30
*** msciciel has quit IRC08:54
*** raildo has joined #openstack-barbican12:23
*** dayou has quit IRC13:23
*** dayou has joined #openstack-barbican13:28
*** dayou has quit IRC13:33
*** dayou has joined #openstack-barbican13:33
*** moguimar has joined #openstack-barbican14:09
*** moguimar has quit IRC15:24
*** moguimar has joined #openstack-barbican15:26
*** moguimar has quit IRC19:22
*** raildo has quit IRC19:30
*** raildo has joined #openstack-barbican19:50
*** raildo has quit IRC21:35
*** xek has quit IRC22:12
*** tosky has quit IRC23:21

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!