os-volumes API policy is allowed for everyone even policy defaults is admin_or_owner

[Brin Zhang]

os-volumes API policy is default to admin_or_owner[1] but API is allowed for everyone.

This is because API does not pass the server project_id in policy target:
show-https://github.com/openstack/nova/blob/c16315165ce307c605cf4b608b2df3aa06f46982/nova/api/openstack/compute/volumes.py#L107

delete-https://github.com/openstack/nova/blob/c16315165ce307c605cf4b608b2df3aa06f46982/nova/api/openstack/compute/volumes.py#L122

details/index-https://github.com/openstack/nova/blob/c16315165ce307c605cf4b608b2df3aa06f46982/nova/api/openstack/compute/volumes.py#L148

create-https://github.com/openstack/nova/blob/c16315165ce307c605cf4b608b2df3aa06f46982/nova/api/openstack/compute/volumes.py#L161

[1]https://github.com/openstack/nova/blob/c16315165ce307c605cf4b608b2df3aa06f46982/nova/policies/volumes.py#L27

[Brin Zhang (zhangbailin)]

Same as in os-volumes-attachments API, with bug 1864776

[Brin Zhang (zhangbailin)]

The ‘os_compute_api:os-volumes’ is deprecated so we dont need to change this api.

[Brin Zhang (zhangbailin)]

https://specs.openstack.org/openstack/nova-specs/specs/ussuri/approved/policy-defaults-refresh.html#scope