diff options
Diffstat (limited to 'nova/policies/hypervisors.py')
| -rw-r--r-- | nova/policies/hypervisors.py | 28 |
1 files changed, 14 insertions, 14 deletions
diff --git a/nova/policies/hypervisors.py b/nova/policies/hypervisors.py index 02a179cb34..f4f29d1e1b 100644 --- a/nova/policies/hypervisors.py +++ b/nova/policies/hypervisors.py @@ -37,7 +37,7 @@ DEPRECATED_POLICY = policy.DeprecatedRule( hypervisors_policies = [ policy.DocumentedRuleDefault( name=BASE_POLICY_NAME % 'list', - check_str=base.SYSTEM_READER, + check_str=base.ADMIN, description="List all hypervisors.", operations=[ { @@ -45,11 +45,11 @@ hypervisors_policies = [ 'method': 'GET' }, ], - scope_types=['system'], + scope_types=['project'], deprecated_rule=DEPRECATED_POLICY), policy.DocumentedRuleDefault( name=BASE_POLICY_NAME % 'list-detail', - check_str=base.SYSTEM_READER, + check_str=base.ADMIN, description="List all hypervisors with details", operations=[ { @@ -57,11 +57,11 @@ hypervisors_policies = [ 'method': 'GET' }, ], - scope_types=['system'], + scope_types=['project'], deprecated_rule=DEPRECATED_POLICY), policy.DocumentedRuleDefault( name=BASE_POLICY_NAME % 'statistics', - check_str=base.SYSTEM_READER, + check_str=base.ADMIN, description="Show summary statistics for all hypervisors " "over all compute nodes.", operations=[ @@ -70,11 +70,11 @@ hypervisors_policies = [ 'method': 'GET' }, ], - scope_types=['system'], + scope_types=['project'], deprecated_rule=DEPRECATED_POLICY), policy.DocumentedRuleDefault( name=BASE_POLICY_NAME % 'show', - check_str=base.SYSTEM_READER, + check_str=base.ADMIN, description="Show details for a hypervisor.", operations=[ { @@ -82,11 +82,11 @@ hypervisors_policies = [ 'method': 'GET' }, ], - scope_types=['system'], + scope_types=['project'], deprecated_rule=DEPRECATED_POLICY), policy.DocumentedRuleDefault( name=BASE_POLICY_NAME % 'uptime', - check_str=base.SYSTEM_READER, + check_str=base.ADMIN, description="Show the uptime of a hypervisor.", operations=[ { @@ -94,11 +94,11 @@ hypervisors_policies = [ 'method': 'GET' }, ], - scope_types=['system'], + scope_types=['project'], deprecated_rule=DEPRECATED_POLICY), policy.DocumentedRuleDefault( name=BASE_POLICY_NAME % 'search', - check_str=base.SYSTEM_READER, + check_str=base.ADMIN, description="Search hypervisor by hypervisor_hostname pattern.", operations=[ { @@ -106,11 +106,11 @@ hypervisors_policies = [ 'method': 'GET' }, ], - scope_types=['system'], + scope_types=['project'], deprecated_rule=DEPRECATED_POLICY), policy.DocumentedRuleDefault( name=BASE_POLICY_NAME % 'servers', - check_str=base.SYSTEM_READER, + check_str=base.ADMIN, description="List all servers on hypervisors that can match " "the provided hypervisor_hostname pattern.", operations=[ @@ -120,7 +120,7 @@ hypervisors_policies = [ 'method': 'GET' } ], - scope_types=['system'], + scope_types=['project'], deprecated_rule=DEPRECATED_POLICY ), ] |