Comment 12 for bug 1466694

Revision history for this message
Sam Morrison (sorrison) wrote :

Usually from the CLI.

I think the main thing is that the policy.json file doesn't work as expected and is not the same as other projects. If I set in the policy file that some role can see any stack that should work. I think all policy should be in the policy level and be stripped out of the DB level. Nova went through the same issue where that had policy checks at the policy layer and the DB layer.

Let operators decide what they want to do and give them the power to do this via the policy.json file. If they want to set a global admin let them to that.