Make manage/unmanage admin only

Manage/Unmanage functionality should be admin
only commands. Make this the default in the policy file.

Change-Id: Ieb71891cdedd36f862f3eaae50174e294417b122

diff --git a/etc/cinder/policy.json b/etc/cinder/policy.json
index dafc2d392325450bae2cb55d3b15edf1953a546b..73b3bc4232ea95863704c893d1da13a84e64cc00 100644 (file)
--- a/etc/cinder/policy.json
+++ b/etc/cinder/policy.json
@@ -41,6 +41,10 @@
     "volume_extension:volume_mig_status_attribute": [["rule:admin_api"]],
     "volume_extension:hosts": [["rule:admin_api"]],
     "volume_extension:services": [["rule:admin_api"]],
+
+    "volume_extension:volume_manage": [["rule:admin_api"]],
+    "volume_extension:volume_unmanage": [["rule:admin_api"]],
+
     "volume:services": [["rule:admin_api"]],
 
     "volume:create_transfer": [],