diff options
Diffstat (limited to 'etc/zaqar/policy.json')
| -rw-r--r-- | etc/zaqar/policy.json | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/zaqar/policy.json b/etc/zaqar/policy.json index 259625e..9dff654 100644 --- a/etc/zaqar/policy.json +++ b/etc/zaqar/policy.json @@ -2,7 +2,7 @@ "deny_readonly": "not role:readonly", "context_is_admin": "role:admin and rule:deny_readonly", "admin_or_owner": "is_admin:True or project_id:%(project_id)s", - "default": "rule:admin_or_owner", + "default": "rule:admin_or_owner and rule:deny_readonly", "queues:get_all": "", "queues:create": "rule:deny_readonly", |