openstack/deb-heat
Code Issues Proposed changes

policy.json allow all users to do stacks:lookup

Browse Source 
We should allow all users, including stack users to do a stacks:lookup
otherwise they need to know both the stack name and ID to make a
request.  This allows us to ensure that any authenticated user can
make a request e.g via heatclient, if they can provide a valid name
or stack ID which they have access to.

Change-Id: Iff992dc5026f436eb22f437ea39b9511ed7fe25d
Partial-Bug: #1291097
This commit is contained in:
Steven Hardy 2014-03-14 15:35:58 +00:00
parent 4a8cae5e28
commit e10ab73777
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
etc/heat/policy.json
View File

@ -44,7 +44,7 @@
"stacks:global_index": "rule:deny_everybody",
"stacks:index": "rule:deny_stack_user",
"stacks:list_resource_types": "rule:deny_stack_user",
"stacks:lookup": "rule:deny_stack_user",
"stacks:lookup": "",
"stacks:preview": "rule:deny_stack_user",
"stacks:resource_schema": "rule:deny_stack_user",
"stacks:show": "rule:deny_stack_user",