From 0178d84e335055dd2fac57f5f93db10b59f8c251 Mon Sep 17 00:00:00 2001 From: Sean Pryor Date: Wed, 29 Nov 2017 09:42:43 -0500 Subject: Fixed grouping of deny_stack_user Change-Id: Ib646d9e795834749cebe18223f743be987920185 --- etc/heat/policy.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/etc/heat/policy.json b/etc/heat/policy.json index 4554918..5357479 100644 --- a/etc/heat/policy.json +++ b/etc/heat/policy.json @@ -6,7 +6,7 @@ "admin": "(is_admin:True or role:admin)", "owner": "(user_id:%(user_id)s and rule:_member_role)", - "deny_stack_user": "(rule:admin or rule:member) and (not role:heat_stack_user)", + "deny_stack_user": "((rule:admin or rule:member) and (not role:heat_stack_user))", "cloudformation:ListStacks": "rule:deny_stack_user", "cloudformation:CreateStack": "rule:deny_stack_user", -- cgit