summaryrefslogtreecommitdiffstats
path: root/nova/api
diff options
context:
space:
mode:
authorIsaku Yamahata <yamahata@valinux.co.jp>2011-06-16 20:29:10 +0900
committerIsaku Yamahata <yamahata@valinux.co.jp>2011-06-16 20:29:10 +0900
commit220ddb2bd5413ea5fa2bff450f4fb3aba136e909 (patch)
tree8cd101a189c2727613a3c963f03cdf44bc1a88ac /nova/api
parentab7c45a9be39def2d6cbb74084abc6fa42f593dd (diff)
downloadnova-220ddb2bd5413ea5fa2bff450f4fb3aba136e909.tar.gz
nova-220ddb2bd5413ea5fa2bff450f4fb3aba136e909.tar.xz
nova-220ddb2bd5413ea5fa2bff450f4fb3aba136e909.zip
api/ec2: check user permission for start/stop instances
This patch adds precise permission check for start/stop instances.
Diffstat (limited to 'nova/api')
-rw-r--r--nova/api/ec2/__init__.py2
1 files changed, 2 insertions, 0 deletions
diff --git a/nova/api/ec2/__init__.py b/nova/api/ec2/__init__.py
index 890d57fe7..857fa96c3 100644
--- a/nova/api/ec2/__init__.py
+++ b/nova/api/ec2/__init__.py
@@ -262,6 +262,8 @@ class Authorizer(wsgi.Middleware):
'TerminateInstances': ['projectmanager', 'sysadmin'],
'RebootInstances': ['projectmanager', 'sysadmin'],
'UpdateInstance': ['projectmanager', 'sysadmin'],
+ 'StartInstances': ['projectmanager', 'sysadmin'],
+ 'StopInstances': ['projectmanager', 'sysadmin'],
'DeleteVolume': ['projectmanager', 'sysadmin'],
'DescribeImages': ['all'],
'DeregisterImage': ['projectmanager', 'sysadmin'],