summaryrefslogtreecommitdiff
path: root/nova/policies/server_password.py
diff options
context:
space:
mode:
Diffstat (limited to 'nova/policies/server_password.py')
-rw-r--r--nova/policies/server_password.py8
1 files changed, 4 insertions, 4 deletions
diff --git a/nova/policies/server_password.py b/nova/policies/server_password.py
index a861d3086c..1f9ddafd3c 100644
--- a/nova/policies/server_password.py
+++ b/nova/policies/server_password.py
@@ -37,7 +37,7 @@ DEPRECATED_POLICY = policy.DeprecatedRule(
server_password_policies = [
policy.DocumentedRuleDefault(
name=BASE_POLICY_NAME % 'show',
- check_str=base.PROJECT_READER_OR_SYSTEM_READER,
+ check_str=base.PROJECT_READER_OR_ADMIN,
description="Show the encrypted administrative "
"password of a server",
operations=[
@@ -46,11 +46,11 @@ server_password_policies = [
'path': '/servers/{server_id}/os-server-password'
},
],
- scope_types=['system', 'project'],
+ scope_types=['project'],
deprecated_rule=DEPRECATED_POLICY),
policy.DocumentedRuleDefault(
name=BASE_POLICY_NAME % 'clear',
- check_str=base.PROJECT_MEMBER_OR_SYSTEM_ADMIN,
+ check_str=base.PROJECT_MEMBER_OR_ADMIN,
description="Clear the encrypted administrative "
"password of a server",
operations=[
@@ -59,7 +59,7 @@ server_password_policies = [
'path': '/servers/{server_id}/os-server-password'
}
],
- scope_types=['system', 'project'],
+ scope_types=['project'],
deprecated_rule=DEPRECATED_POLICY),
]