Comment 7 for bug 1504495

Reviewed: https://review.openstack.org/260478
Committed: https://git.openstack.org/cgit/openstack/aodh/commit/?id=410d8da15d6c6f14e86cd8eac21f696a1ef5fa86
Submitter: Jenkins
Branch: stable/liberty

commit 410d8da15d6c6f14e86cd8eac21f696a1ef5fa86
Author: Mehdi Abaakouk <email address hidden>
Date: Mon Dec 7 09:52:57 2015 +0100

    Fix rbac system

    After investigation of the heat breakage, after
    we update the policy.json. We discover
    that the rbac have never worked as expected.
    The only rule that works is role == admin. All other
    just can't works.

    So the policy file have been changed to, By default project
    owner of the alarm should be able to change their alarms.
    And anyone can create a new alarm.

    Also the alarm definition is now passed to the policy enforcer
    to allow it checks owner of the alarms.

    Closes-bug: #1504495

    Conflicts:
     aodh/tests/functional/gabbi/fixtures.py

    The conflict is an useless additional import.

    Change-Id: I408d839eec84af46adb333a6ad5c49c890513fd0
    (cherry picked from commit dde97121526973448c4fb420da838acc4b387af3)