Open Stack

Hi All,

Despite the fact that oslopolicy-policy-generator --namespace nova shows the rules "project_member_api": "role:member and project_id:%(project_id)s" and "os_compute_api:servers:create": "rule:project_member_api", it is still possible to create a server even if you only have the role "member" on the project.

Is this behavior normal or not ? Must we consider that we are in a phase of transition about nova default policies ?

Thanks,
Jean-Francois