diff options
Diffstat (limited to 'etc/neutron/policy.json')
| -rw-r--r-- | etc/neutron/policy.json | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/neutron/policy.json b/etc/neutron/policy.json index 75b5a1f..e4ea2d7 100644 --- a/etc/neutron/policy.json +++ b/etc/neutron/policy.json @@ -1,6 +1,6 @@ { "deny_readonly": "not role:readonly", - "context_is_admin": "role:admin", + "context_is_admin": "role:admin and rule:deny_readonly", "owner": "tenant_id:%(tenant_id)s and rule:deny_readonly", "admin_or_owner": "rule:context_is_admin or rule:owner", "context_is_advsvc": "role:advsvc and rule:deny_readonly", |