diff options
Diffstat (limited to 'etc/zaqar/policy.json')
| -rw-r--r-- | etc/zaqar/policy.json | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/zaqar/policy.json b/etc/zaqar/policy.json index a7645f7..259625e 100644 --- a/etc/zaqar/policy.json +++ b/etc/zaqar/policy.json @@ -1,6 +1,6 @@ { "deny_readonly": "not role:readonly", - "context_is_admin": "role:admin", + "context_is_admin": "role:admin and rule:deny_readonly", "admin_or_owner": "is_admin:True or project_id:%(project_id)s", "default": "rule:admin_or_owner", |