From e10ab7377753666f38f91c8c38bf78e1ef44ee58 Mon Sep 17 00:00:00 2001 From: Steven Hardy Date: Fri, 14 Mar 2014 15:35:58 +0000 Subject: [PATCH] policy.json allow all users to do stacks:lookup We should allow all users, including stack users to do a stacks:lookup otherwise they need to know both the stack name and ID to make a request. This allows us to ensure that any authenticated user can make a request e.g via heatclient, if they can provide a valid name or stack ID which they have access to. Change-Id: Iff992dc5026f436eb22f437ea39b9511ed7fe25d Partial-Bug: #1291097 --- etc/heat/policy.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/etc/heat/policy.json b/etc/heat/policy.json index 7ea27b113..e3e8822b1 100644 --- a/etc/heat/policy.json +++ b/etc/heat/policy.json @@ -44,7 +44,7 @@ "stacks:global_index": "rule:deny_everybody", "stacks:index": "rule:deny_stack_user", "stacks:list_resource_types": "rule:deny_stack_user", - "stacks:lookup": "rule:deny_stack_user", + "stacks:lookup": "", "stacks:preview": "rule:deny_stack_user", "stacks:resource_schema": "rule:deny_stack_user", "stacks:show": "rule:deny_stack_user",