I'm assuming your mean the following lines in nova policy.js: "compute_extension:os-assisted-volume-snapshots:create":"rule:admin_api", "compute_extension:os-assisted-volume-snapshots:delete":"rule:admin_api" These 2 calls are not intended to be made directly via an end user, but via cinder, as a privileged user. Please do not patch tempest, since this is a real bug it is highlighting. The fix is to get cinder to use a privileged user account to make this call. Please raise a cinder bug. Thanks Hi, As part of tempest job " gate-tempest-dsvm-full-glusterfs <http://logs.openstack.org/11/159711/1/experimental/gate-tempest-dsvm-full-glusterfs/b2cb37e/>" run [1], the test case " test_snapshot_create_with_volume_in_use" [2] is failing. This is because demo user is unable to create online snapshots, due to nova policy rules[3]. To avoid this issue we can modify test case, to make "demo" user as an admin before creating snapshot and reverting after it finishes. Another approach is to use privileged user ( https://review.openstack.org/#/c/156940/) to create online snapshot. [1] http://logs.openstack.org/11/159711/1/experimental/gate-tempest-dsvm-full-glusterfs/b2cb37e/ [2] https://github.com/openstack/tempest/blob/master/tempest/api/volume/test_volumes_snapshots.py#L66 [3] https://github.com/openstack/nova/blob/master/etc/nova/policy.json#L329 -- Warm Regards, Bharat Kumar Kobagana Software Engineer OpenStack Storage – RedHat India __________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150302/7247fce7/attachment.html>