[Openstack] Restricting volume attachment using policies

Vincent Gatignol openstack at gatignol.fr
Mon Feb 20 09:01:04 UTC 2017


Le 20/02/2017 à 09:20, Markus Hentsch a écrit :
> Hello,
>
> I'm running a Newton setup where I'm trying to restrict the volume
> attachment actions using Nova's policy file.
>
> I want to check for both the VM ownership as well as the volume
> ownership, so that users should be unable to attach volumes if they
> aren't the owner of both the VM and the volume.
>
This is related to https://bugs.launchpad.net/nova/+bug/1539351
Openstack policies are mapped at the tenant/project level, not user

Regards,
Vincent
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20170220/4618d99b/attachment.html>


More information about the Openstack mailing list