Comment 2 for bug 1117433

it looks like you need context_is_admin your policy.json file:

I think you should replace your admin_or_owner lines with the lines from the default file in folsom:

  "context_is_admin": [["role:admin"]],
  "admin_or_owner": [["is_admin:True"], ["project_id:%(project_id)s"]],