From 4582eb6f72c3c2eebe156e667143e4204f22bbe6 Mon Sep 17 00:00:00 2001 From: "Vincent S. Cojot" Date: Tue, 18 Apr 2017 11:39:45 -0400 Subject: More lock-downs in heat, aodh, glance and neutron... --- etc/aodh/policy.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'etc/aodh') diff --git a/etc/aodh/policy.json b/etc/aodh/policy.json index b4ea233..1b6715e 100644 --- a/etc/aodh/policy.json +++ b/etc/aodh/policy.json @@ -10,11 +10,11 @@ "telemetry:query_alarm": "rule:admin_or_owner", "telemetry:create_alarm": "rule:deny_readonly", - "telemetry:change_alarm": "rule:admin_or_owner", - "telemetry:delete_alarm": "rule:admin_or_owner", + "telemetry:change_alarm": "rule:admin_or_owner and rule:deny_readonly", + "telemetry:delete_alarm": "rule:admin_or_owner and rule:deny_readonly", "telemetry:get_alarm_state": "rule:admin_or_owner", - "telemetry:change_alarm_state": "rule:admin_or_owner", + "telemetry:change_alarm_state": "rule:admin_or_owner and rule:deny_readonly", "telemetry:alarm_history": "rule:admin_or_owner", "telemetry:query_alarm_history": "rule:admin_or_owner" -- cgit