From 7de819740bed7c4f7a8a463413142878734e115d Mon Sep 17 00:00:00 2001 From: John Griffith Date: Thu, 24 Jul 2014 00:05:08 -0600 Subject: [PATCH] Make manage/unmanage admin only Manage/Unmanage functionality should be admin only commands. Make this the default in the policy file. Change-Id: Ieb71891cdedd36f862f3eaae50174e294417b122 --- etc/cinder/policy.json | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/etc/cinder/policy.json b/etc/cinder/policy.json index dafc2d392..73b3bc423 100644 --- a/etc/cinder/policy.json +++ b/etc/cinder/policy.json @@ -41,6 +41,10 @@ "volume_extension:volume_mig_status_attribute": [["rule:admin_api"]], "volume_extension:hosts": [["rule:admin_api"]], "volume_extension:services": [["rule:admin_api"]], + + "volume_extension:volume_manage": [["rule:admin_api"]], + "volume_extension:volume_unmanage": [["rule:admin_api"]], + "volume:services": [["rule:admin_api"]], "volume:create_transfer": [], -- 2.45.2