In my Rocky installation I am preventing users from deleting instances created by other users of the same project.

This was implemented setting in the nova policy file:

"os_compute_api:servers:delete": "rule:admin_api or user_id:%(user_id)s"

This works, even if in the nova log file I see:

The user_id attribute isn't supported in the rule 'os_compute_api:servers:delete'. All the user_id based policy enforcement will be removed in the future.

Now I would also like preventing user to see the console log file of instances created by other users. I set in the nova policy file:

"os_compute_api:os-console-output" : "rule:admin_api or user_id:%(user_id)s"

but this doesn't work

Any hints ?

More in general: were the user_id based policy eventually removed in latest OpenStack releases ?

Which are then the  possible alternatives to implement my use case ?

Thanks, Massimo