[openstack-dev] Flavor Extra Specs extension - Clarification on default permissions needed

Jay Pipes jaypipes at gmail.com
Mon Dec 24 16:25:16 UTC 2012


Hi Stackers,

A recent merge proposal in Tempest deals with the Flavor Extra Specs
extension to the Compute API:

https://review.openstack.org/18324

I found it curious that admin privileges are needed to create a flavor,
but it seems that non-admins can add extra specs to any flavor.

Is this by design or is this a bug -- i.e. the policy.json should be
updated to make flavor extra spec POST/PUT/DELETE calls admin-only by
default?

Thanks in advance for any clarification,
-jay



More information about the OpenStack-dev mailing list