summaryrefslogtreecommitdiffstats
path: root/etc/heat/policy.json
diff options
context:
space:
mode:
Diffstat (limited to 'etc/heat/policy.json')
-rw-r--r--etc/heat/policy.json2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/heat/policy.json b/etc/heat/policy.json
index 4554918..5357479 100644
--- a/etc/heat/policy.json
+++ b/etc/heat/policy.json
@@ -6,7 +6,7 @@
"admin": "(is_admin:True or role:admin)",
"owner": "(user_id:%(user_id)s and rule:_member_role)",
- "deny_stack_user": "(rule:admin or rule:member) and (not role:heat_stack_user)",
+ "deny_stack_user": "((rule:admin or rule:member) and (not role:heat_stack_user))",
"cloudformation:ListStacks": "rule:deny_stack_user",
"cloudformation:CreateStack": "rule:deny_stack_user",