summaryrefslogtreecommitdiff
path: root/nova/policies/floating_ips.py
diff options
context:
space:
mode:
Diffstat (limited to 'nova/policies/floating_ips.py')
-rw-r--r--nova/policies/floating_ips.py24
1 files changed, 12 insertions, 12 deletions
diff --git a/nova/policies/floating_ips.py b/nova/policies/floating_ips.py
index 0b8d8c53f6..48d60d7b89 100644
--- a/nova/policies/floating_ips.py
+++ b/nova/policies/floating_ips.py
@@ -38,7 +38,7 @@ DEPRECATED_FIP_POLICY = policy.DeprecatedRule(
floating_ips_policies = [
policy.DocumentedRuleDefault(
name=BASE_POLICY_NAME % 'add',
- check_str=base.PROJECT_MEMBER_OR_SYSTEM_ADMIN,
+ check_str=base.PROJECT_MEMBER_OR_ADMIN,
description="Associate floating IPs to server. "
" This API is deprecated.",
operations=[
@@ -47,11 +47,11 @@ floating_ips_policies = [
'path': '/servers/{server_id}/action (addFloatingIp)'
}
],
- scope_types=['system', 'project'],
+ scope_types=['project'],
deprecated_rule=DEPRECATED_FIP_POLICY),
policy.DocumentedRuleDefault(
name=BASE_POLICY_NAME % 'remove',
- check_str=base.PROJECT_MEMBER_OR_SYSTEM_ADMIN,
+ check_str=base.PROJECT_MEMBER_OR_ADMIN,
description="Disassociate floating IPs to server. "
" This API is deprecated.",
operations=[
@@ -60,11 +60,11 @@ floating_ips_policies = [
'path': '/servers/{server_id}/action (removeFloatingIp)'
}
],
- scope_types=['system', 'project'],
+ scope_types=['project'],
deprecated_rule=DEPRECATED_FIP_POLICY),
policy.DocumentedRuleDefault(
name=BASE_POLICY_NAME % 'list',
- check_str=base.PROJECT_READER_OR_SYSTEM_READER,
+ check_str=base.PROJECT_READER_OR_ADMIN,
description="List floating IPs. This API is deprecated.",
operations=[
{
@@ -72,11 +72,11 @@ floating_ips_policies = [
'path': '/os-floating-ips'
}
],
- scope_types=['system', 'project'],
+ scope_types=['project'],
deprecated_rule=DEPRECATED_FIP_POLICY),
policy.DocumentedRuleDefault(
name=BASE_POLICY_NAME % 'create',
- check_str=base.PROJECT_MEMBER_OR_SYSTEM_ADMIN,
+ check_str=base.PROJECT_MEMBER_OR_ADMIN,
description="Create floating IPs. This API is deprecated.",
operations=[
{
@@ -84,11 +84,11 @@ floating_ips_policies = [
'path': '/os-floating-ips'
}
],
- scope_types=['system', 'project'],
+ scope_types=['project'],
deprecated_rule=DEPRECATED_FIP_POLICY),
policy.DocumentedRuleDefault(
name=BASE_POLICY_NAME % 'show',
- check_str=base.PROJECT_READER_OR_SYSTEM_READER,
+ check_str=base.PROJECT_READER_OR_ADMIN,
description="Show floating IPs. This API is deprecated.",
operations=[
{
@@ -96,11 +96,11 @@ floating_ips_policies = [
'path': '/os-floating-ips/{floating_ip_id}'
}
],
- scope_types=['system', 'project'],
+ scope_types=['project'],
deprecated_rule=DEPRECATED_FIP_POLICY),
policy.DocumentedRuleDefault(
name=BASE_POLICY_NAME % 'delete',
- check_str=base.PROJECT_MEMBER_OR_SYSTEM_ADMIN,
+ check_str=base.PROJECT_MEMBER_OR_ADMIN,
description="Delete floating IPs. This API is deprecated.",
operations=[
{
@@ -108,7 +108,7 @@ floating_ips_policies = [
'path': '/os-floating-ips/{floating_ip_id}'
}
],
- scope_types=['system', 'project'],
+ scope_types=['project'],
deprecated_rule=DEPRECATED_FIP_POLICY),
]