Extend edc role

Addresses-Issue: Jira/AQUILON-1596
Reviewed-By: Zoltan Sebestyen <Zoltan.Sebestyen@morganstanley.com>
update_disk permissions

All roles that can run add_disk/del_disk should also be allowed to run
update_disk.

Change-Id: I7fc6c2dfd5dce136e0b2c52c4ab911df159cdb6b
Addresses-Issue: Jira/AQUILON-1600
Reviewed-By: Zoltan Sebestyen <Zoltan.Sebestyen@morganstanley.com>
deprecated warnings combined with --noauth flag results in Internal Server Error

There's a logic in the broker to log the name of the user specifying a
deprecated command or option. In case of the readonly broker username is
not set, resulting in a 'Too few arguments' error.
Currently, for performance reasons, these deprecation messages are
disabled for show commands.

Change-Id: I8a6ed2fed6689e9bda47a1d476324b458b0b359d
Addresses-Issue: Jira/AQUILON-1592
Reviewed-By: Priya Joshi <Priya.Joshi@morganstanley.com>
Merge remote-tracking branches 'origin/for_next/deprecated_bug', 'origin/for_next/update_disk_perms' and 'origin/for_next/extend_edc_role'
Adding test cases for DSDB comment propergation

Addresses-Issue: Jira/AQUILON-1382
Change-Id: I5fc5f1a29a4e71eff655a9a6b379f83167f956d4
Reviewed-By: Priya Joshi <Priya.Joshi@morganstanley.com>
Fix DSDB comment propergation

This changes the way that 'dsdb update_host' is called.  If the
update includes an IP address of a MAC address then the interface
name is passed during the update (if supplied).

When only the comments change, then no interface name is supplied,
thus DSDB will update the host comment and not the interface comment.

Addresses-Issue: Jira/AQUILON-1382
Change-Id: I450de19bf853f16218eb998cfd89b6a3e9a23ee1
Reviewed-By: Priya Joshi <Priya.Joshi@morganstanley.com>
Merge remote-tracking branch 'origin/for_next/dsdb_comments'
Sort the result of search_parameter_definition

Change-Id: If5a4614a95fb7b300018531175fc1308a02143e3
Reviewed-by: Zoltan Sebestyen <Zoltan.Sebestyen@morganstanley.com>
Testsuite: do not assume protobuf output is ordered

The protobuf output of show_parameter is not necessarily ordered, so the
tests should not depend on a particular order.

Change-Id: Idc21e1de9ba2b7678b0fef8445c4014941268d60
Reviewed-by: Zoltan Sebestyen <Zoltan.Sebestyen@morganstanley.com>
Add support for floating point numbers in Pan templates

Change-Id: I35d3d88e3c55cd3cb5a15022e98e1c5c099e1ce8
Reviewed-by: Zoltan Sebestyen <Zoltan.Sebestyen@morganstanley.com>
Enfoce true network address during addition of static routes

When routes are added with add_static_route the IP address
specified should be a network address.  For example the
network address in 192.168.96.150/24 should be 192.168.96.0.
This change enforces the condition 'ip & mask == ip'.

Change-Id: Icd8fabf78edfd6b1d536a54433be90aa296f48d5
Addresses-Issue: Jira/AQUILON-1571
Reviewed-by: Gabor Gombas <Gabor.Gombas@morganstanley.com>
Fix search_audit performance on Oracle

See https://groups.google.com/d/topic/sqlalchemy/8Xn31vBfGKU/discussion
for the details. In theory the issue could impact other queries as well,
so we may need a more generic solution.

Change-Id: I68eb571ca5e26688bf5450026ce62a9122d56fcd
Reviewed-By: Zoltan Sebestyen <Zoltan.Sebestyen@morganstanley.com>
Merge remote-tracking branch 'origin/for_next/pan_float'
Merge remote-tracking branch 'origin/for_next/static_route_dest'
Merge remote-tracking branch 'origin/for_next/search_audit_performance'
Fix the secadmin role

Commit dfe39553a2a04ba8a27a5af0842911b7465dfb1d made sure the secadmin
role cannot run commands other than "aq permission", but it did not
allow "aq permission" to be run by secadmin. Fix that.

Change-Id: I9a8e0d7c4f72713438b4d142adc51d6fe328d330
Addresses-Issue: Jira/AQUILON-1524
Reviewed-By: Zoltan Sebestyen <Zoltan.Sebestyen@morganstanley.com>
Moving aqd initalization code out of resources.py

Change-Id: I39ac0bb11e61d1044c3b218e51f446e198d021e5
Reviewed-By: Gabor Gombas <Gabor.Gombas@morganstanley.com>
Moving audit id creation our of BrokerCommand

The creation of audit id's is not really a command that a sub-class
of BrokerCommand should be running.  I have moved this to a module
scope function.

Change-Id: I18fdd2d10f93cbb4bd6ba4b1ea3be8bb523f9b9f
Reviewed-By: Gabor Gombas <Gabor.Gombas@morganstanley.com>
Factor our broker._record_xtn

This function is a wrapper around start_xtn, which is only ever
called from this one place.  Therefore I have pushed down the
modifications into the wrapper and not the broker.

Change-Id: Ia4a7572317b6d8be27e5f371b899c6a12ed414da
Reviewed-By: Gabor Gombas <Gabor.Gombas@morganstanley.com>
Merge remote-tracking branch 'origin/for_next/fix_secadmin'