diff --git a/neutron/conf/policies/flavor.py b/neutron/conf/policies/flavor.py index 6e281d2e61f..9801bb9f75f 100644 --- a/neutron/conf/policies/flavor.py +++ b/neutron/conf/policies/flavor.py @@ -47,7 +47,11 @@ rules = [ ), policy.DocumentedRuleDefault( name='get_flavor', - check_str=base.ADMIN_OR_PROJECT_READER, + # NOTE: it can't be ADMIN_OR_PROJECT_READER constant from the base + # module because that is using "project_id" in the check string and the + # service_provider resource don't belongs to any project thus such + # check string would fail enforcement. + check_str='role:reader', description='Get a flavor', operations=[ { diff --git a/neutron/tests/unit/conf/policies/test_flavor.py b/neutron/tests/unit/conf/policies/test_flavor.py index db043b5fc8f..1d7138af309 100644 --- a/neutron/tests/unit/conf/policies/test_flavor.py +++ b/neutron/tests/unit/conf/policies/test_flavor.py @@ -23,7 +23,7 @@ class FlavorAPITestCase(base.PolicyBaseTestCase): def setUp(self): super(FlavorAPITestCase, self).setUp() - self.target = {'project_id': self.project_id} + self.target = {} class SystemAdminTests(FlavorAPITestCase):