Return a value for mask_secrets which can be used in masking secret properties to be retruned by any API. The default value is as per the config however admin users have the ability to override by passing in a special query parameter ?show_secrets=True. :rty
(self, requester_user, show_secrets=None)
| 67 | return value |
| 68 | |
| 69 | def _get_mask_secrets(self, requester_user, show_secrets=None): |
| 70 | """ |
| 71 | Return a value for mask_secrets which can be used in masking secret properties |
| 72 | to be retruned by any API. The default value is as per the config however admin |
| 73 | users have the ability to override by passing in a special query parameter |
| 74 | ?show_secrets=True. |
| 75 | |
| 76 | :rtype: ``bool`` |
| 77 | """ |
| 78 | mask_secrets = cfg.CONF.api.mask_secrets |
| 79 | |
| 80 | rbac_utils = get_rbac_backend().get_utils_class() |
| 81 | if show_secrets and rbac_utils.user_is_admin(user_db=requester_user): |
| 82 | mask_secrets = False |
| 83 | |
| 84 | return mask_secrets |