*** This bug is a duplicate of bug 1636157 *** https://bugs.launchpad.net/bugs/1636157
** This bug has been marked a duplicate of bug 1636157 os-server-groups uses same policy.json rule for all CRUD operations -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1632820 Title: os-server-groups policy doesn't separate CRUD actions Status in OpenStack Compute (nova): Opinion Bug description: nova.api.openstack.compute.server_groups.ServerGroupController uses the same policy check (os_compute_api:os-server-groups) for show, delete, index, and create, instead of separating these into separate checks (e.g. os_compute_api:os-server-groups:delete). This makes it impossible to customize policy such that some roles are allowed to do some but not all of these operations, E.g. show/index server groups but not create/delete them. Found with Newton. To manage notifications about this bug go to: https://bugs.launchpad.net/nova/+bug/1632820/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp