@John - could you please give some details on "volume_create --> volume:create in the policy file" in comment #6?
check_policy(context, 'create_volume')
def check_policy(context, action, target_obj=None): ... _action = 'volume:%s' % action
Doesn't this map to 'volume:create_volume' and not to 'volume:create' that we have in the policy.json? No?
@John - could you please give some details on "volume_create --> volume:create in the policy file" in comment #6?
check_policy( context, 'create_volume')
def check_policy( context, action, target_obj=None):
...
_action = 'volume:%s' % action
Doesn't this map to 'volume: create_ volume' and not to 'volume:create' that we have in the policy.json? No?