Currently we applied the policy enforcement at domain layer instead of api controller in v2, https://github.com/openstack/glance/blob/master/glance/api/policy.py#L237 .
Currently we applied the policy enforcement at domain layer instead of api controller in v2, https:/ /github. com/openstack/ glance/ blob/master/ glance/ api/policy. py#L237 .