Add policy style '@'/'!' rules to prop protections

A value of '@' will always allow the corresponding operation for a
property, and '!' will always disallow the operation.

Related to blueprint api-v2-property-protection

DocImpact

Change-Id: I1196a58a6f97cd0856bf97463386776a00359a49
Merge "Add policy style '@'/'!' rules to prop protections"
Sync lockutils from oslo

Change-Id: I906810cd8b109dd2b88e76c5aec9536c62913068
Signed-off-by: Zhi Yan Liu <zhiyanl@cn.ibm.com>
glance-manage should work like nova-manage

nova-manage supports subcommands of db, for nova-manage,
eg) 'nova-manage db sync',
glance manage however has individual commands like db_sync, db_version
etc. This patch aims at adding the db operations as subcommands to db in
glance-manage similar to nova and refactoring this bit of code in
cmd/manage.py

Fixes: bug 1213197
Change-Id: I6fad31766bc1cec2a666a7ebc8df5c732007c5f1
Merge "glance-manage should work like nova-manage"