Comment 5 for bug 1502136

Stuart, so what you want is the following

1. A very locked down policy.json
2. Glance configured to show locations
3. A user to be able to list/show images but not see the images, as in image locations only being added to the response when an admin is listing/showing images?

This should be easy to do, but it's a significant departure from the existing norm. I agree this is not the best behaviour, but I would like to see a "lite" spec for this before we accept any fix for it so that people understand why the behaviour changed so drastically.