The nova.policy Module

Policy Engine For Nova

check_is_admin(roles)

Whether or not roles contains ‘admin’ role according to policy setting.

enforce(context, action, target)

Verifies that the action is valid on the target in this context.

Parameters:
  • context – nova context
  • action – string representing the action to be checked this should be colon separated for clarity. i.e. compute:create_instance, compute:attach_volume, volume:attach_volume
  • object – dictionary representing the object of the action for object creation this should be a dictionary representing the location of the object e.g. {'project_id': context.project_id}
Raises nova.exception.PolicyNotAllowed:
 

if verification fails.

init()
reset()

Previous topic

The nova.openstack.common.timeutils Module

Next topic

The nova.quota Module

This Page