summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorVincent S. Cojot <vcojot@redhat.com>2017-05-01 14:01:01 -0400
committerVincent S. Cojot <vcojot@redhat.com>2017-05-01 14:01:01 -0400
commitcf2eac7a0977c756706d0ac85038097fcf548fcb (patch)
tree9fc8d9f630b7917a4c30b4e3dbee5f98b67b6cee
parent953d885b75d789474e1b4964c194c067bf5db13f (diff)
downloadopenstack-access-policy-cf2eac7a0977c756706d0ac85038097fcf548fcb.zip
openstack-access-policy-cf2eac7a0977c756706d0ac85038097fcf548fcb.tar.gz
openstack-access-policy-cf2eac7a0977c756706d0ac85038097fcf548fcb.tar.xz
Fix for err 403 when listing metrics as sevone...
-rw-r--r--etc/gnocchi/policy.json6
1 files changed, 3 insertions, 3 deletions
diff --git a/etc/gnocchi/policy.json b/etc/gnocchi/policy.json
index 98fe90d..9381e11 100644
--- a/etc/gnocchi/policy.json
+++ b/etc/gnocchi/policy.json
@@ -33,11 +33,11 @@
"create metric": "rule:deny_readonly",
"delete metric": "rule:admin_or_creator",
- "get metric": "rule:admin_or_creator or rule:metric_owner",
+ "get metric": "rule:admin_or_creator or rule:metric_owner or role:readonly",
"search metric": "rule:admin_or_creator or rule:metric_owner",
"list metric": "",
- "list all metric": "role:admin",
+ "list all metric": "role:admin or role:readonly",
- "get measures": "rule:admin_or_creator or rule:metric_owner",
+ "get measures": "rule:admin_or_creator or rule:metric_owner or role:readonly",
"post measures": "rule:admin_or_creator"
}