]> review.fuel-infra Code Review - openstack-build/cinder-build.git/commit
Code Review / openstack-build / cinder-build.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 34f07c6) | patch
Set default policy for "volume:get"
authorliyingjun <yingjun.li@kylin-cloud.com>
Fri, 17 Jul 2015 07:48:18 +0000 (15:48 +0800)
committerliyingjun <yingjun.li@kylin-cloud.com>
Fri, 17 Jul 2015 07:48:18 +0000 (15:48 +0800)
commit5a4f399d6c3c675afab5a1bd961db6a39e37ac1b
treeaa9fc0a5e5242cab6cd2d6fdf6099e9eec5f3ae7tree | snapshot
parent34f07c635b054a281e07c5544deaf62b521168e6commit | diff
Set default policy for "volume:get"

Currently, there is no policy check defined for "volume:get", so
everyone can get another tenant's volume detail by UUID. It's necessary
to set policy to "rule:admin_or_owner" for "volume:get" by default.

Change-Id: Iefdf7e5703a28856b20d97a885267c01bed6bbb4
Closes-bug: #1475422
etc/cinder/policy.json diff | blob | history