diff options
Diffstat (limited to 'etc/aodh/policy.json')
| -rw-r--r-- | etc/aodh/policy.json | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/aodh/policy.json b/etc/aodh/policy.json index 1b6715e..38bb14d 100644 --- a/etc/aodh/policy.json +++ b/etc/aodh/policy.json @@ -1,6 +1,6 @@ { "deny_readonly": "not role:readonly", - "context_is_admin": "role:admin", + "context_is_admin": "role:admin and rule:deny_readonly", "segregation": "rule:context_is_admin", "admin_or_owner": "rule:context_is_admin or project_id:%(project_id)s", "default": "rule:admin_or_owner", |