[rbac] Reader user can create, delete, update and restore backups

[Yosi Ben Shimon]

This role shouldn't be able to perform these operations as it's a reader user.
The failures occurred during Zuul validation on u/s.
Running on OSP 17.1.0 worked as expected.

The responses for the operations are:

create:
{'backup': {'id': '915d04b0-46ce-4724-9279-698cca8b0f70', 'name': None, 'links': [{'rel': 'self', 'href': 'https://213.32.79.154/volume/v3/39ed2fd470ee48a9a0aa78ebd18cc1f5/backups/915d04b0-46ce-4724-9279-698cca8b0f70'}, {'rel': 'bookmark', 'href': 'https://213.32.79.154/volume/39ed2fd470ee48a9a0aa78ebd18cc1f5/backups/915d04b0-46ce-4724-9279-698cca8b0f70'}]}}

delete:
{}
* The operation returned {} but it actually deleted the backup

update:
{'backup': {'id': 'a48492ee-032f-4aa5-924d-07ec2764e98c', 'name': 'tempest-backup-name-1182439341', 'links': [{'rel': 'self', 'href': 'https://213.32.79.154/volume/v3/9e0e0cc026bc46bfab3027aa5d0fbf1d/backups/a48492ee-032f-4aa5-924d-07ec2764e98c'}, {'rel': 'bookmark', 'href': 'https://213.32.79.154/volume/9e0e0cc026bc46bfab3027aa5d0fbf1d/backups/a48492ee-032f-4aa5-924d-07ec2764e98c'}]}}

restore:
{'restore': {'backup_id': '4b9d4dc4-9ec8-46dc-a993-86695114e218', 'volume_id': '6d38a319-4033-4f52-8a3b-c170772230b9', 'volume_name': 'new-backup-vol'}}

[Dr. Jens Harbott (j-harbott)]

Can you please show the steps to reproduce this? I'm thinking that this is more of an issue in cinder than in devstack.

[Launchpad Janitor (janitor)]

[Expired for devstack because there has been no activity for 60 days.]