Merge "rest: add policy enforcement for archive policy retrieval"

etc/gnocchi/policy.json

@@ -2,6 +2,8 @@
     "admin_or_creator": "role:admin or created_by_project_id:%(project_id)s",
     "owner": "project_id:%(project_id)s",
 
+    "get archive policy": "",
+
     "create metric": "",
     "delete metric": "rule:admin_or_creator",
     "get metric": "rule:admin_or_creator or rule:owner",

gnocchi/rest/__init__.py

@@ -260,6 +260,7 @@ class ArchivePoliciesController(rest.RestController):
     @pecan.expose('json')
     def get_one(self, id):
         ap = pecan.request.indexer.get_archive_policy(id)
+        enforce("get archive policy", ap)
         if ap:
             return ArchivePolicyItem.archive_policy_to_human_readable(ap)
         pecan.abort(404)