From 9bcdd05f0d30dea02747ab9d8fea9ebe4fa9b8c7 Mon Sep 17 00:00:00 2001
From: Ghanshyam Mann <gmann@ghanshyammann.com>
Date: Wed, 8 Jan 2020 23:48:32 +0000
Subject: [PATCH] Add new default roles in os-admin-password policies

This adds new defaults roles in os-admin-password API policies.

This policy is default to owner or system admin role.

Partial implement blueprint policy-defaults-refresh

Change-Id: Ieb026dadca2021dcc0451bf2167b15f5380e74ef
---
 nova/policies/admin_password.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nova/policies/admin_password.py b/nova/policies/admin_password.py
index c1e0946034..455771037c 100644
--- a/nova/policies/admin_password.py
+++ b/nova/policies/admin_password.py
@@ -24,7 +24,7 @@ BASE_POLICY_NAME = 'os_compute_api:os-admin-password'
 admin_password_policies = [
     policy.DocumentedRuleDefault(
         name=BASE_POLICY_NAME,
-        check_str=base.RULE_ADMIN_OR_OWNER,
+        check_str=base.PROJECT_MEMBER_OR_SYSTEM_ADMIN,
         description="Change the administrative password for a server",
         operations=[
             {