diff --git a/nova/policies/used_limits.py b/nova/policies/used_limits.py index e2e44216c7..af35fc12a3 100644 --- a/nova/policies/used_limits.py +++ b/nova/policies/used_limits.py @@ -26,9 +26,22 @@ used_limits_policies = [ policy.RuleDefault( name=POLICY_ROOT % 'discoverable', check_str=base.RULE_ANY), - policy.RuleDefault( - name=BASE_POLICY_NAME, - check_str=base.RULE_ADMIN_API), + # TODO(aunnam): Remove this rule after we seperate the scope check from + # policies, as this is only checking the scope. + base.create_rule_default( + BASE_POLICY_NAME, + base.RULE_ADMIN_API, + """Shows rate and absolute limits for the project. + +This policy only checks if the user has access to the requested +project limits. And this check is performed only after the check +os_compute_api:limits passes""", + [ + { + 'method': 'GET', + 'path': '/limits' + } + ]), ]