From 13f0468e376a17ea7811b97c5a8f72bb63d52249 Mon Sep 17 00:00:00 2001 From: liyingjun Date: Sun, 12 Jan 2014 23:19:44 +0800 Subject: [PATCH] Change default policy for volume_extension:volume_tenant_attribute The volume_tenant_attribute extension should be accessible by the owning tenant and the admin. Change default policy from 'rule:admin_api' to 'rule:admin_or_owner'. Change-Id: I886cd717741c86b5083aeaf16e3e7ea5b4e525b4 Closes-bug: #1269312 --- etc/cinder/policy.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/etc/cinder/policy.json b/etc/cinder/policy.json index b149ecf0d..18cbe76bc 100644 --- a/etc/cinder/policy.json +++ b/etc/cinder/policy.json @@ -36,7 +36,7 @@ "volume_extension:volume_admin_actions:migrate_volume_completion": [["rule:admin_api"]], "volume_extension:volume_host_attribute": [["rule:admin_api"]], - "volume_extension:volume_tenant_attribute": [["rule:admin_api"]], + "volume_extension:volume_tenant_attribute": [["rule:admin_or_owner"]], "volume_extension:volume_mig_status_attribute": [["rule:admin_api"]], "volume_extension:hosts": [["rule:admin_api"]], "volume_extension:services": [["rule:admin_api"]], -- 2.45.2