diff options
| author | Vincent S. Cojot <vcojot@redhat.com> | 2017-04-18 11:39:45 -0400 |
|---|---|---|
| committer | Vincent S. Cojot <vcojot@redhat.com> | 2017-04-18 11:39:45 -0400 |
| commit | 4582eb6f72c3c2eebe156e667143e4204f22bbe6 (patch) | |
| tree | 7ea8634da97721c4d442e0e3040af856f9852e57 /etc/aodh | |
| parent | 5920ca013bc91e28f02bd4ab8be88a724ead37ed (diff) | |
| download | openstack-access-policy-4582eb6f72c3c2eebe156e667143e4204f22bbe6.tar.gz openstack-access-policy-4582eb6f72c3c2eebe156e667143e4204f22bbe6.tar.xz openstack-access-policy-4582eb6f72c3c2eebe156e667143e4204f22bbe6.zip | |
More lock-downs in heat, aodh, glance and neutron...
Diffstat (limited to 'etc/aodh')
| -rw-r--r-- | etc/aodh/policy.json | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/etc/aodh/policy.json b/etc/aodh/policy.json index b4ea233..1b6715e 100644 --- a/etc/aodh/policy.json +++ b/etc/aodh/policy.json @@ -10,11 +10,11 @@ "telemetry:query_alarm": "rule:admin_or_owner", "telemetry:create_alarm": "rule:deny_readonly", - "telemetry:change_alarm": "rule:admin_or_owner", - "telemetry:delete_alarm": "rule:admin_or_owner", + "telemetry:change_alarm": "rule:admin_or_owner and rule:deny_readonly", + "telemetry:delete_alarm": "rule:admin_or_owner and rule:deny_readonly", "telemetry:get_alarm_state": "rule:admin_or_owner", - "telemetry:change_alarm_state": "rule:admin_or_owner", + "telemetry:change_alarm_state": "rule:admin_or_owner and rule:deny_readonly", "telemetry:alarm_history": "rule:admin_or_owner", "telemetry:query_alarm_history": "rule:admin_or_owner" |