feature: 3-level policies, system/domain/project

pkg/keystone/models/domains.go

@@ -126,7 +126,7 @@ func (manager *SDomainManager) FetchDomainById(domainId string) (*SDomain, error
 	if err != nil {
 		return nil, err
 	}
-	q := manager.Query().Equals("id", domainId).NotEquals("id", api.KeystoneDomainRoot)
+	q := manager.Query().Equals("id", domainId) // .NotEquals("id", api.KeystoneDomainRoot)
 	err = q.First(obj)
 	if err != nil {
 		return nil, err

pkg/mcclient/modules/mod_policies.go

@@ -79,6 +79,7 @@ func policyWriteFilter(session *mcclient.ClientSession, s jsonutils.JSONObject,
 				return nil, err
 			}
 		}
+		// ret.Add(jsonutils.NewString(blobJson.String()), "blob")
 		ret.Add(blobJson, "blob")
 	}
 	if s.Contains("type") {