I tried this and wasn't able to reproduce it: deployed devstack w/ srbac enabled
$ source ~/devstack/openrc admin admin $ cinder type-create badtype $ cinder type-key 643b5c9e-eafa-4a1c-9d8d-8d91246dbfa7 set asdf=qwert $ source ~/devstack/openrc demo demo $ cinder create 1 --volume-type 643b5c9e-eafa-4a1c-9d8d-8d91246dbfa7 $ cinder message-list $ source ~/devstack/openrc demo_reader demo $ cinder message-delete aae9ce95-bd35-4fcb-97bf-6a44774d6090 Delete for message aae9ce95-bd35-4fcb-97bf-6a44774d6090 failed: Policy doesn't allow message:delete to be performed. (HTTP 403) (Request-ID: req-e7c90bbd-7ae6-4a8f-a4a5-88df0d95fdf2) ERROR: Unable to delete any of the specified messages.
I tried this and wasn't able to reproduce it:
deployed devstack w/ srbac enabled
$ source ~/devstack/openrc admin admin eafa-4a1c- 9d8d-8d91246dbf a7 set asdf=qwert eafa-4a1c- 9d8d-8d91246dbf a7 bd35-4fcb- 97bf-6a44774d60 90 bd35-4fcb- 97bf-6a44774d60 90 failed: Policy doesn't allow message:delete to be performed. (HTTP 403) (Request-ID: req-e7c90bbd- 7ae6-4a8f- a4a5-88df0d95fd f2)
$ cinder type-create badtype
$ cinder type-key 643b5c9e-
$ source ~/devstack/openrc demo demo
$ cinder create 1 --volume-type 643b5c9e-
$ cinder message-list
$ source ~/devstack/openrc demo_reader demo
$ cinder message-delete aae9ce95-
Delete for message aae9ce95-
ERROR: Unable to delete any of the specified messages.