https://github.com/casbin/openstack-patron

OpenStack Patron, an authorization component for OpenStack
https://github.com/casbin/openstack-patron

authorization casbin openstack

Last synced: about 1 year ago
JSON representation

OpenStack Patron, an authorization component for OpenStack

• Host: GitHub
• URL: https://github.com/casbin/openstack-patron
• Owner: casbin
• License: apache-2.0
• Created: 2021-07-01T14:09:32.000Z (almost 5 years ago)
• Default Branch: master
• Last Pushed: 2021-07-01T14:12:01.000Z (almost 5 years ago)
• Last Synced: 2024-10-29T10:01:34.142Z (over 1 year ago)
• Topics: authorization, casbin, openstack
• Language: Python
• Homepage: https://github.com/casbin/openstack-authz/issues/1
• Size: 4.92 MB
• Stars: 0
• Watchers: 3
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.rst
  • License: LICENSE

Awesome Lists containing this project

README

          
Patron

======

--------

Overview

--------

Patron is an access control service for OpenStack cloud. It controls the access to RESTful APIs

exposed by other OpenStack services based on policy enforcement. The goal is to make access controls

of other services easier and more powerful.

Patron is comprised of two parts: 

the ``patron service`` and a request filter called ``Access Endpoint Middleware (AEM)``:

* ``patron service`` stores the access control policies of other OpenStack services and provides access decisions based on those policies.

 

* ``AEM`` is to be installed on all other OpenStack services that needs access control. The requests to those services are first mediated by the patron service, who makes a decision (``YES`` or ``NO``) based on policy and returns the result back to AEM. If patron's answer is ``YES``, AEM permits this request, otherwise the request is going to be denied.

Patron provides RESTful APIs to users so that they can view and update their

access control policies to the cloud. Patron improves the original ``policy.json``

access control mechanism by allowing an individual user to have their own policy.

With the help of patron, the original access control hooks inside other services

can be removed.

Patron is designed to be capable of handling access control missions for many other

services. Currently supported services are: ``nova``, ``glance``, ``neutron``, ``cinder``, ``heat`` and

``ceilometer``. More service' supports will be added in the future.