fix: resolve permission issues for samlusers and quotas

pkg/cloudid/policy/defaults.go

@@ -85,6 +85,24 @@ var (
 				},
 			},
 		},
+		{
+			Auth:  true,
+			Scope: rbacutils.ScopeUser,
+			Rules: []rbacutils.SRbacRule{
+				{
+					Service:  api.SERVICE_TYPE,
+					Resource: "samlusers",
+					Action:   PolicyActionList,
+					Result:   rbacutils.Allow,
+				},
+				{
+					Service:  api.SERVICE_TYPE,
+					Resource: "samlusers",
+					Action:   PolicyActionGet,
+					Result:   rbacutils.Allow,
+				},
+			},
+		},
 	}
 )
 

pkg/cloudid/policy/resources.go

@@ -28,6 +28,7 @@ var (
 	}
 	cloudidUserResources = []string{
 		"cloudusers",
+		"samlusers",
 	}
 )
 

pkg/keystone/locale/predefined_policies.go

@@ -76,18 +76,50 @@ var (
 						"list",
 						"get",
 					},
+					"quotas": {
+						"list",
+						"get",
+					},
+					"zone_quotas": {
+						"list",
+						"get",
+					},
+					"region_quotas": {
+						"list",
+						"get",
+					},
+					"project_quotas": {
+						"list",
+						"get",
+					},
+					"domain_quotas": {
+						"list",
+						"get",
+					},
+					"infras_quotas": {
+						"list",
+						"get",
+					},
 				},
 				"image": {
 					"usages": {
 						"list",
 						"get",
 					},
+					"image_quotas": {
+						"list",
+						"get",
+					},
 				},
 				"identity": {
 					"usages": {
 						"list",
 						"get",
 					},
+					"identity_quotas": {
+						"list",
+						"get",
+					},
 				},
 				"meter": {
 					"bill_conditions": {