Comment 5 for bug 1245350

Revision history for this message
Andrew Laski (alaski) wrote :

Admins are typically allowed to perform actions on other tenants, right? And if that's not desired that can be limited through policy configuration. But based on the way default policies are setup I've always considered admin to be an operator level role in which case it makes sense for the role to set quotas across tenants.

If that's not the case then it needs to be addressed in more places than just quota operations. But maybe a good start would be to change the policy defaults shipped with Nova to include "and project_id:%(project_id)s".