summaryrefslogtreecommitdiffstats
path: root/etc/sahara
diff options
context:
space:
mode:
authorVincent S. Cojot <vcojot@redhat.com>2017-05-17 11:07:34 -0400
committerVincent S. Cojot <vcojot@redhat.com>2017-05-17 11:07:34 -0400
commitf525e60288c645b3fe13d600c456a53e45760249 (patch)
tree98a96fc83c1b1f948ebbd293a77e19505709d206 /etc/sahara
parentf3ac476a745952f5f8784c7ab48dc0d3075c8f1b (diff)
downloadopenstack-access-policy-f525e60288c645b3fe13d600c456a53e45760249.tar.gz
openstack-access-policy-f525e60288c645b3fe13d600c456a53e45760249.tar.xz
openstack-access-policy-f525e60288c645b3fe13d600c456a53e45760249.zip
Latest set of updates: deny readonly in context_is_admin
Diffstat (limited to 'etc/sahara')
-rw-r--r--etc/sahara/policy.json2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/sahara/policy.json b/etc/sahara/policy.json
index 06948c5..bfab46f 100644
--- a/etc/sahara/policy.json
+++ b/etc/sahara/policy.json
@@ -1,6 +1,6 @@
{
"deny_readonly": "not role:readonly",
- "context_is_admin": "role:admin",
+ "context_is_admin": "role:admin and rule:deny_readonly",
"default": "",
"data-processing:clusters:get_all": "",