Lack rights for regular user: unability to create ec2 credentials

[Andriy Kurilin]

As a regular OpenStack user, I was able to create ec2 credentials without "admin" rights. It was possible before merging one of the recent changes (Presumably, this one - [0]). Now, I'm getting an error "You are not authorized to perform the requested action: identity:ec2_create_credential."[1]

[0] - https://github.com/openstack/keystone/commit/e2949253176b6bf7f9e3ef1ac2793e4abd6382ca
[1] - http://logs.openstack.org/75/429175/16/check/gate-rally-dsvm-rally-ubuntu-xenial/16674c1/rally-plot/results.html.gz#/KeystoneBasic.create_and_delete_ec2credential/failures

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/449161

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/449161
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=72216757991a2120bb81e0003496eee908373b0c
Submitter: Jenkins
Branch: master

commit 72216757991a2120bb81e0003496eee908373b0c
Author: David Stanek <email address hidden>
Date: Thu Mar 23 13:50:40 2017 +0000

    Set the correct in-code policy for ec2 operations

    In I8bd0fa342cdfee00acd3c7a33f7232fe0a87e23f we moved some of the policy
    defaults into code. Some of the policy were accidentally changed.

    Change-Id: Ib744317025d928c7397ab00dc706172592a9abaf
    Closes-Bug: #1675377

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/keystone 12.0.0.0b1 development milestone.