diff options
author | Sean Pryor <spryor@redhat.com> | 2017-11-29 09:42:43 -0500 |
---|---|---|
committer | Sean Pryor <spryor@redhat.com> | 2017-11-29 09:42:43 -0500 |
commit | 0178d84e335055dd2fac57f5f93db10b59f8c251 (patch) | |
tree | 485fa47f6cb51dde44300f4bcb9b42687afddc52 | |
parent | e188fe2390ecc3c3534fe9f40a3d68c49073308e (diff) | |
download | openstack-access-policy-0178d84e335055dd2fac57f5f93db10b59f8c251.tar.gz openstack-access-policy-0178d84e335055dd2fac57f5f93db10b59f8c251.tar.xz openstack-access-policy-0178d84e335055dd2fac57f5f93db10b59f8c251.zip |
Change-Id: Ib646d9e795834749cebe18223f743be987920185
-rw-r--r-- | etc/heat/policy.json | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/heat/policy.json b/etc/heat/policy.json index 4554918..5357479 100644 --- a/etc/heat/policy.json +++ b/etc/heat/policy.json @@ -6,7 +6,7 @@ "admin": "(is_admin:True or role:admin)", "owner": "(user_id:%(user_id)s and rule:_member_role)", - "deny_stack_user": "(rule:admin or rule:member) and (not role:heat_stack_user)", + "deny_stack_user": "((rule:admin or rule:member) and (not role:heat_stack_user))", "cloudformation:ListStacks": "rule:deny_stack_user", "cloudformation:CreateStack": "rule:deny_stack_user", |