diff options
Diffstat (limited to 'nova/policies/services.py')
| -rw-r--r-- | nova/policies/services.py | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/nova/policies/services.py b/nova/policies/services.py index bd4e455a95..7300d3bdb3 100644 --- a/nova/policies/services.py +++ b/nova/policies/services.py @@ -37,7 +37,7 @@ DEPRECATED_SERVICE_POLICY = policy.DeprecatedRule( services_policies = [ policy.DocumentedRuleDefault( name=BASE_POLICY_NAME % 'list', - check_str=base.SYSTEM_READER, + check_str=base.ADMIN, description="List all running Compute services in a region.", operations=[ { @@ -45,11 +45,11 @@ services_policies = [ 'path': '/os-services' } ], - scope_types=['system'], + scope_types=['project'], deprecated_rule=DEPRECATED_SERVICE_POLICY), policy.DocumentedRuleDefault( name=BASE_POLICY_NAME % 'update', - check_str=base.SYSTEM_ADMIN, + check_str=base.ADMIN, description="Update a Compute service.", operations=[ { @@ -58,11 +58,11 @@ services_policies = [ 'path': '/os-services/{service_id}' }, ], - scope_types=['system'], + scope_types=['project'], deprecated_rule=DEPRECATED_SERVICE_POLICY), policy.DocumentedRuleDefault( name=BASE_POLICY_NAME % 'delete', - check_str=base.SYSTEM_ADMIN, + check_str=base.ADMIN, description="Delete a Compute service.", operations=[ { @@ -70,7 +70,7 @@ services_policies = [ 'path': '/os-services/{service_id}' } ], - scope_types=['system'], + scope_types=['project'], deprecated_rule=DEPRECATED_SERVICE_POLICY), ] |