Merge "Change default policy to view quota details"

nova/policies/quota_sets.py

@@ -64,7 +64,7 @@ quota_sets_policies = [
         ]),
     policy.DocumentedRuleDefault(
         POLICY_ROOT % 'detail',
-        base.RULE_ADMIN_API,
+        base.RULE_ADMIN_OR_OWNER,
         "Show the detail of quota",
         [
             {

nova/tests/unit/test_policy.py

@@ -298,7 +298,6 @@ class RealRolePolicyTestCase(test.NoDBTestCase):
 "os_compute_api:os-networks-associate",
 "os_compute_api:os-quota-sets:update",
 "os_compute_api:os-quota-sets:delete",
-"os_compute_api:os-quota-sets:detail",
 "os_compute_api:os-security-group-default-rules",
 "os_compute_api:os-server-diagnostics",
 "os_compute_api:os-services",
@@ -333,6 +332,7 @@ class RealRolePolicyTestCase(test.NoDBTestCase):
 "os_compute_api:os-pause-server:pause",
 "os_compute_api:os-pause-server:unpause",
 "os_compute_api:os-quota-sets:show",
+"os_compute_api:os-quota-sets:detail",
 "os_compute_api:server-metadata:index",
 "os_compute_api:server-metadata:show",
 "os_compute_api:server-metadata:delete",

releasenotes/notes/quota-show-detail-access-d6f37282d288fa33.yaml

@@ -0,0 +1,5 @@
+---
+upgrade:
+  - The default policy for os_compute_api:os-quota-sets:detail has
+    been changed to permit listing of quotas with details to project
+    users, not only to admins.