From: John Griffith <john.griffith@solidfire.com>
Date: Thu, 24 Jul 2014 06:05:08 +0000 (-0600)
Subject: Make manage/unmanage admin only
X-Git-Url: https://review.fuel-infra.org/gitweb?a=commitdiff_plain;h=7de819740bed7c4f7a8a463413142878734e115d;p=openstack-build%2Fcinder-build.git

Make manage/unmanage admin only

Manage/Unmanage functionality should be admin
only commands. Make this the default in the policy file.

Change-Id: Ieb71891cdedd36f862f3eaae50174e294417b122
---

diff --git a/etc/cinder/policy.json b/etc/cinder/policy.json
index dafc2d392..73b3bc423 100644
--- a/etc/cinder/policy.json
+++ b/etc/cinder/policy.json
@@ -41,6 +41,10 @@
     "volume_extension:volume_mig_status_attribute": [["rule:admin_api"]],
     "volume_extension:hosts": [["rule:admin_api"]],
     "volume_extension:services": [["rule:admin_api"]],
+
+    "volume_extension:volume_manage": [["rule:admin_api"]],
+    "volume_extension:volume_unmanage": [["rule:admin_api"]],
+
     "volume:services": [["rule:admin_api"]],
 
     "volume:create_transfer": [],