diff options
| author | Sean Pryor <spryor@redhat.com> | 2017-11-29 09:42:43 -0500 |
|---|---|---|
| committer | Sean Pryor <spryor@redhat.com> | 2017-11-29 09:42:43 -0500 |
| commit | 0178d84e335055dd2fac57f5f93db10b59f8c251 (patch) | |
| tree | 485fa47f6cb51dde44300f4bcb9b42687afddc52 | |
| parent | e188fe2390ecc3c3534fe9f40a3d68c49073308e (diff) | |
| download | openstack-access-policy-master.tar.gz openstack-access-policy-master.tar.xz openstack-access-policy-master.zip | |
Change-Id: Ib646d9e795834749cebe18223f743be987920185
| -rw-r--r-- | etc/heat/policy.json | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/heat/policy.json b/etc/heat/policy.json index 4554918..5357479 100644 --- a/etc/heat/policy.json +++ b/etc/heat/policy.json @@ -6,7 +6,7 @@ "admin": "(is_admin:True or role:admin)", "owner": "(user_id:%(user_id)s and rule:_member_role)", - "deny_stack_user": "(rule:admin or rule:member) and (not role:heat_stack_user)", + "deny_stack_user": "((rule:admin or rule:member) and (not role:heat_stack_user))", "cloudformation:ListStacks": "rule:deny_stack_user", "cloudformation:CreateStack": "rule:deny_stack_user", |