summaryrefslogtreecommitdiff
path: root/glance/policies/metadef.py
diff options
context:
space:
mode:
Diffstat (limited to 'glance/policies/metadef.py')
-rw-r--r--glance/policies/metadef.py3
1 files changed, 2 insertions, 1 deletions
diff --git a/glance/policies/metadef.py b/glance/policies/metadef.py
index d1feaaed8..84641f42c 100644
--- a/glance/policies/metadef.py
+++ b/glance/policies/metadef.py
@@ -23,7 +23,8 @@ The metadata API now supports project scope and default roles.
metadef_policies = [
policy.RuleDefault(name="metadef_default", check_str=""),
- policy.RuleDefault(name="metadef_admin", check_str="role:admin"),
+ policy.RuleDefault(name="metadef_admin",
+ check_str="rule:context_is_admin"),
policy.DocumentedRuleDefault(
name="get_metadef_namespace",
check_str=base.ADMIN_OR_PROJECT_READER_GET_NAMESPACE,