diff options
Diffstat (limited to 'keystone-moon/keystone/policy/core.py')
| -rw-r--r-- | keystone-moon/keystone/policy/core.py | 141 |
1 files changed, 0 insertions, 141 deletions
diff --git a/keystone-moon/keystone/policy/core.py b/keystone-moon/keystone/policy/core.py deleted file mode 100644 index f52795a5..00000000 --- a/keystone-moon/keystone/policy/core.py +++ /dev/null @@ -1,141 +0,0 @@ -# Copyright 2012 OpenStack Foundation -# -# Licensed under the Apache License, Version 2.0 (the "License"); you may -# not use this file except in compliance with the License. You may obtain -# a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT -# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the -# License for the specific language governing permissions and limitations -# under the License. - -"""Main entry point into the Policy service.""" - -import abc - -from oslo_config import cfg -import six - -from keystone.common import dependency -from keystone.common import manager -from keystone import exception -from keystone import notifications - - -CONF = cfg.CONF - - -@dependency.provider('policy_api') -class Manager(manager.Manager): - """Default pivot point for the Policy backend. - - See :mod:`keystone.common.manager.Manager` for more details on how this - dynamically calls the backend. - - """ - - driver_namespace = 'keystone.policy' - - _POLICY = 'policy' - - def __init__(self): - super(Manager, self).__init__(CONF.policy.driver) - - def create_policy(self, policy_id, policy, initiator=None): - ref = self.driver.create_policy(policy_id, policy) - notifications.Audit.created(self._POLICY, policy_id, initiator) - return ref - - def get_policy(self, policy_id): - try: - return self.driver.get_policy(policy_id) - except exception.NotFound: - raise exception.PolicyNotFound(policy_id=policy_id) - - def update_policy(self, policy_id, policy, initiator=None): - if 'id' in policy and policy_id != policy['id']: - raise exception.ValidationError('Cannot change policy ID') - try: - ref = self.driver.update_policy(policy_id, policy) - except exception.NotFound: - raise exception.PolicyNotFound(policy_id=policy_id) - notifications.Audit.updated(self._POLICY, policy_id, initiator) - return ref - - @manager.response_truncated - def list_policies(self, hints=None): - # NOTE(henry-nash): Since the advantage of filtering or list limiting - # of policies at the driver level is minimal, we leave this to the - # caller. - return self.driver.list_policies() - - def delete_policy(self, policy_id, initiator=None): - try: - ret = self.driver.delete_policy(policy_id) - except exception.NotFound: - raise exception.PolicyNotFound(policy_id=policy_id) - notifications.Audit.deleted(self._POLICY, policy_id, initiator) - return ret - - -@six.add_metaclass(abc.ABCMeta) -class PolicyDriverV8(object): - - def _get_list_limit(self): - return CONF.policy.list_limit or CONF.list_limit - - @abc.abstractmethod - def enforce(self, context, credentials, action, target): - """Verify that a user is authorized to perform action. - - For more information on a full implementation of this see: - `keystone.policy.backends.rules.Policy.enforce` - """ - raise exception.NotImplemented() # pragma: no cover - - @abc.abstractmethod - def create_policy(self, policy_id, policy): - """Store a policy blob. - - :raises keystone.exception.Conflict: If a duplicate policy exists. - - """ - raise exception.NotImplemented() # pragma: no cover - - @abc.abstractmethod - def list_policies(self): - """List all policies.""" - raise exception.NotImplemented() # pragma: no cover - - @abc.abstractmethod - def get_policy(self, policy_id): - """Retrieve a specific policy blob. - - :raises keystone.exception.PolicyNotFound: If the policy doesn't exist. - - """ - raise exception.NotImplemented() # pragma: no cover - - @abc.abstractmethod - def update_policy(self, policy_id, policy): - """Update a policy blob. - - :raises keystone.exception.PolicyNotFound: If the policy doesn't exist. - - """ - raise exception.NotImplemented() # pragma: no cover - - @abc.abstractmethod - def delete_policy(self, policy_id): - """Remove a policy blob. - - :raises keystone.exception.PolicyNotFound: If the policy doesn't exist. - - """ - raise exception.NotImplemented() # pragma: no cover - - -Driver = manager.create_legacy_driver(PolicyDriverV8) |