Comment 8 for bug 1239681

http://paste.ubuntu.com/7041709/ appears to show a perfectly proper rejection of an attempt to read arbitrary settings. If (around line 57 of the paste) there was a call to "relation-list -r cfgm:11" to get the remote units actually in that relation, followed by a "relation-get -r cfgm:11 ..." that named one of those units, then the "permission denied" would be unexpected. As it is, though, not a bug.

I'll mark it "incomplete" to leave a window for clarification, but in the absence of same I'll be setting it back to "fix released" for 1.17.4 later today.