Hi,

We are running Train release, currently facing below error when change to “Images” panel on the project which I have “User” role. The image is visibility is public.

Error: Forbidden. Insufficient permissions of the requested operation

Error: Unable to retrieve the project.

By using openstack-cli everything works and I do not face “Forbidden” 403, but in dashboard “access.log” it shows

"GET /dashboard/api/keystone/projects/7331defd55ef479fbf0a9a1ac3fe9055 HTTP/1.1” 403 http://xxxxxx/dashboard/project/images”

I checked:

1. glance: policy.json from both dashboard and api/registry hosts are same.

2. From dashboard API images is 2

As soon as I change the OWNER of image to the project which my role = USER the error disappears.

Any ideas or previous encounter similar to this issue?

Thanks

Amjad