summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSean Pryor <spryor@redhat.com>2017-11-29 09:42:43 -0500
committerSean Pryor <spryor@redhat.com>2017-11-29 09:42:43 -0500
commit0178d84e335055dd2fac57f5f93db10b59f8c251 (patch)
tree485fa47f6cb51dde44300f4bcb9b42687afddc52
parente188fe2390ecc3c3534fe9f40a3d68c49073308e (diff)
downloadopenstack-access-policy-master.zip
openstack-access-policy-master.tar.gz
openstack-access-policy-master.tar.xz
Fixed grouping of deny_stack_userHEADmaster
Change-Id: Ib646d9e795834749cebe18223f743be987920185
-rw-r--r--etc/heat/policy.json2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/heat/policy.json b/etc/heat/policy.json
index 4554918..5357479 100644
--- a/etc/heat/policy.json
+++ b/etc/heat/policy.json
@@ -6,7 +6,7 @@
"admin": "(is_admin:True or role:admin)",
"owner": "(user_id:%(user_id)s and rule:_member_role)",
- "deny_stack_user": "(rule:admin or rule:member) and (not role:heat_stack_user)",
+ "deny_stack_user": "((rule:admin or rule:member) and (not role:heat_stack_user))",
"cloudformation:ListStacks": "rule:deny_stack_user",
"cloudformation:CreateStack": "rule:deny_stack_user",