Comment 16 for bug 1472031

Revision history for this message
Anna Sortland (annasort) wrote :

@John - could you please give some details on "volume_create --> volume:create in the policy file" in comment #6?

check_policy(context, 'create_volume')

def check_policy(context, action, target_obj=None):
   ...
   _action = 'volume:%s' % action

Doesn't this map to 'volume:create_volume' and not to 'volume:create' that we have in the policy.json? No?