Andrew Bogott has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/273003

Change subject: Glance policy.json: Give glanceadmin a bunch more rights
......................................................................

Glance policy.json: Give glanceadmin a bunch more rights

Bug: T127755
Change-Id: I795c329aab01ec2945d33f520a6ee7ef7e879fd6
---
M modules/openstack/files/kilo/glance/policy.json
1 file changed, 7 insertions(+), 7 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/03/273003/1

diff --git a/modules/openstack/files/kilo/glance/policy.json 
b/modules/openstack/files/kilo/glance/policy.json
index febd21e..083b5e1 100644
--- a/modules/openstack/files/kilo/glance/policy.json
+++ b/modules/openstack/files/kilo/glance/policy.json
@@ -3,23 +3,23 @@
     "admin_or_owner":  "is_admin:True or project_id:%(project_id)s",
     "admin_or_glanceadmin": "is_admin:True or role:glanceadmin",
 
-    "default": "role:admin",
+    "default": "rule:admin_or_glanceadmin",
 
     "add_image": "rule:admin_or_glanceadmin",
     "delete_image": "rule:admin_or_glanceadmin",
     "get_image": "",
     "get_images": "",
-    "modify_image": "role:admin",
-    "publicize_image": "role:admin",
-    "copy_from": "role:admin",
-    "manage_image_cache": "role:admin_or_glance_admin",
+    "modify_image": "rule:admin_or_glanceadmin",
+    "publicize_image": "rule:admin_or_glanceadmin",
+    "copy_from": "rule:admin_or_glanceadmin",
+    "manage_image_cache": "rule:admin_or_glance_admin",
 
     "download_image": "",
     "upload_image": "rule:admin_or_glanceadmin",
 
-    "delete_image_location": "role:admin",
+    "delete_image_location": "rule:admin_or_glanceadmin",
     "get_image_location": "",
-    "set_image_location": "role:admin",
+    "set_image_location": "rule:admin_or_glanceadmin",
 
     "add_member": "role:admin",
     "delete_member": "role:admin",

-- 
To view, visit https://gerrit.wikimedia.org/r/273003
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I795c329aab01ec2945d33f520a6ee7ef7e879fd6
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Andrew Bogott <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to