Comment 5 for bug 1529354

Revision history for this message
huangtianhua (huangtianhua) wrote :

If we enable reauth, we can't update the stack with a nova flavor resource, even if 'trusts_delegated_roles = []', due the stored_context has no roles, then the policy check for rule will fail:
 "context_is_admin": "role:admin"
"resource_types:OS::Nova::Flavor": "rule:context_is_admin"