tree 87eb21da37b3e9ac14b382bc1de4d6175d2416cf
parent 0464e81c98b1d71d0bd42ce520013cd0ac1c8bac
author Sergey Vilgelm <sergey@vilgelm.info> 1539284688 -0500
committer Sergey Vilgelm <sergey@vilgelm.info> 1542221932 -0600
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEwIoo0NdlUl/otoG0CNDi/3eIh+YFAlvscGwACgkQCNDi/3eI
 h+ZDEw//TsVxWITLyb7BmncQH9hg5tJ0mNSytiC6/VQiqnMWW/wEAC+MycnGXYl5
 c/lZboNNjBG8TK4S+UcHMyToUzDYeqA5Eq3nob/j2ilHjnNTSOwh2IzqhrPlenmc
 gWkd31YL+vEHxXv0Rse7mOM+EqIxbJ8NGqUHM+dhavfdc7gCI9gbPmB7kX8tvdx+
 4yEG822qT5hUTcsZ1tB81Zm8TmDBuos50cOQ0N0gX7feYUPlx5XAJIrKGCh4nPeo
 Mm0Przw6LOmyO+nqYx7QCiYYV2UpSSODnZ8WtEO/rCVo72ZcvrEhuHrC89BXebUQ
 mdWd2OVk9w3cb4prLReCSh+EfqWzrkNcDrTmIkbNkLIRnuTX9q6OXlvtEa5pqtbs
 D1gZxcW7XIQdLPSUJGQybQ9bSnkUt2Q9LqnzrDT4mhTlT8G+Z2hulhwrlbw4ILNI
 T4Vpgs6padeYqTmnWkciNHy/7BmEW1hYj3zMGdZzLV+bqdZS241a2GK+wxDsnM2Y
 qZklqvKR8r8zd76cmjUR4ssPwkXeihcCxeXKdv+h0YftIGj9sDFqtAlBKmxTA+t1
 pVXalhlD/i9DInPm8PSPsD7KjLybYKMlsrGL0gTxS8KVC3jextR7SLVwKoo92nqR
 QBLxmH5KTy5G1kQtb4vfId/AaCDsLPFjU5DDI5P7DHMMxeHwYZ0=
 =qRoB
 -----END PGP SIGNATURE-----

Helper for validating RBAC list actions

List RBAC actions typically perform soft authorization checks meaning
that the response bodies omit resources that the user isn't authorized
to see.
For example, if an admin user creates a user, member role might not be
able to see that user when listing all the users in a tenant,
depending on the RBAC rule.
This patch set adds override_role_and_validate_list function to
RbacUtils to validate RBAC flows for API list actions.

Change-Id: I5f39efc8aa0004d4ad435cbd6b8fb037c33832d6