[nova] [ops] user_id based policy enforcement