From 540e3d349960db81311531b385cf9be1d09e6934 Mon Sep 17 00:00:00 2001 From: Michael Johnson Date: Thu, 23 Feb 2023 18:22:52 +0000 Subject: [PATCH] Fix example policy file system-reader role This patch fixes the sample keystone_default_roles-policy.yaml file to use admin instead of reader for the system-reader role. Change-Id: I914aaa2eb57cf4c7206909e8ea17af1033c54965 (cherry picked from commit 32988c0ae82ac8b52a95d5bf5b2f087d12230642) --- etc/policy/keystone_default_roles-policy.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/etc/policy/keystone_default_roles-policy.yaml b/etc/policy/keystone_default_roles-policy.yaml index e64ad7444b..6b8ec283b8 100644 --- a/etc/policy/keystone_default_roles-policy.yaml +++ b/etc/policy/keystone_default_roles-policy.yaml @@ -9,7 +9,7 @@ # Role Rules "system_admin": "role:admin" -"system_reader": "role:reader" +"system_reader": "role:admin" "project_reader": "role:reader and project_id:%(project_id)s" "project_member": "role:member and project_id:%(project_id)s"