Change default policy for volume_extension:volume_tenant_attribute

The volume_tenant_attribute extension should be accessible by
the owning tenant and the admin. Change default policy from
'rule:admin_api' to 'rule:admin_or_owner'.

Change-Id: I886cd717741c86b5083aeaf16e3e7ea5b4e525b4
Closes-bug: #1269312

diff --git a/etc/cinder/policy.json b/etc/cinder/policy.json
index b149ecf0d789997f38eadabb3ccec28ee1feb700..18cbe76bcde9a341ea8341de843ee7ab82d31134 100644 (file)
--- a/etc/cinder/policy.json
+++ b/etc/cinder/policy.json
@@ -36,7 +36,7 @@
     "volume_extension:volume_admin_actions:migrate_volume_completion": [["rule:admin_api"]],
 
     "volume_extension:volume_host_attribute": [["rule:admin_api"]],
-    "volume_extension:volume_tenant_attribute": [["rule:admin_api"]],
+    "volume_extension:volume_tenant_attribute": [["rule:admin_or_owner"]],
     "volume_extension:volume_mig_status_attribute": [["rule:admin_api"]],
     "volume_extension:hosts": [["rule:admin_api"]],
     "volume_extension:services": [["rule:admin_api"]],