File 0002_enhance_policy_rules_to_workflow_actions_i... of Package openstack-dashboard

Overview Repositories Revisions Requests Users Attributes Meta

File 0002_enhance_policy_rules_to_workflow_actions_identity_project.patch of Package openstack-dashboard

--- a/openstack_dashboard/dashboards/identity/projects/workflows.py
+++ b/openstack_dashboard/dashboards/identity/projects/workflows.py
@@ -30,6 +30,7 @@
 from horizon import workflows
 
 from openstack_dashboard import api
+from openstack_dashboard import policy
 from openstack_dashboard.api import base
 from openstack_dashboard.api import cinder
 from openstack_dashboard.api import keystone
@@ -112,6 +113,7 @@
     class Meta(object):
         name = _("Quota")
         slug = 'update_quotas'
+        policy_rules = (('compute', "compute_extension:quotas:update"),)
         help_text = _("Set maximum quotas for the project.")
 
 
@@ -861,8 +863,11 @@
             if not ret:
                 return False
 
-        ret = self._update_project_quota(request, data, project_id)
-        if not ret:
-            return False
+        # Update quotas only if we are allowed
+        rules = UpdateProjectQuotaAction.policy_rules
+        if policy.check(rules, request):
+            ret = self._update_project_quota(request, data, project_id)
+            if not ret:
+                return False
 
         return True

Places

File 0002_enhance_policy_rules_to_workflow_actions_identity_project.patch of Package openstack-dashboard

Places