diff options
Diffstat (limited to 'etc/cinder/policy.json')
| -rw-r--r-- | etc/cinder/policy.json | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/cinder/policy.json b/etc/cinder/policy.json index 5844cea..585b31a 100644 --- a/etc/cinder/policy.json +++ b/etc/cinder/policy.json @@ -34,8 +34,8 @@ "volume_extension:access_types_qos_specs_id": "rule:admin_api", "volume_extension:access_types_extra_specs": "rule:admin_api", "volume_extension:volume_type_access": "rule:admin_or_owner", - "volume_extension:volume_type_access:addProjectAccess": "rule:admin_api", - "volume_extension:volume_type_access:removeProjectAccess": "rule:admin_api", + "volume_extension:volume_type_access:addProjectAccess": "rule:admin_api and rule:deny_readonly", + "volume_extension:volume_type_access:removeProjectAccess": "rule:admin_api and rule:deny_readonly", "volume_extension:volume_type_encryption": "rule:admin_api", "volume_extension:volume_encryption_metadata": "rule:admin_or_owner", "volume_extension:extended_snapshot_attributes": "rule:admin_or_owner", |