Merge "Use *_OR_ADMIN policy defaults for server shares"

This commit is contained in:
Zuul
2026-01-23 05:00:53 +00:00
committed by Gerrit Code Review
2 changed files with 17 additions and 4 deletions
@@ -0,0 +1,13 @@
---
upgrade:
- |
The server-shares API policies have been updated to allow admin users
(those with the role admin) to access them. There are no changes to the
permissions for project users with the role reader/member. The following
API policies have been updated from PROJECT_READER/PROJECT_MEMBER to
PROJECT_READER_OR_ADMIN/PROJECT_MEMBER_OR_ADMIN to facilitate this change.
* ``os_compute_api:os-server-shares:index`` → ``PROJECT_READER_OR_ADMIN``
* ``os_compute_api:os-server-shares:create`` → ``PROJECT_MEMBER_OR_ADMIN``
* ``os_compute_api:os-server-shares:show`` → ``PROJECT_READER_OR_ADMIN``
* ``os_compute_api:os-server-shares:delete`` → ``PROJECT_MEMBER_OR_ADMIN``