Comment 7 for bug 1413610

Mike: Duncan is correct, elevating the nova context does not mean that nova will use different credentials when it connects to the cinder API. That's what I was saying in my last post and I've confirmed it with nova developers.

Given that, it seems that 'nova volume-update' is working as expected. The user credentials passed with the os-migrate_volume_completion do not have admin rights, so cinder returns the status 403.

Do you agree with that? or is there something else you had in mind?