From what I can tell, the bug is that the used limits API is exposed to non-admin users. The policy is using RULE_ADMIN_API [1] but I think maybe it doesn't work because the path for both "limits" and "used limits" is "/limits".
But maybe this has been exposed so long that quota-sets should be changed to have parity.
From what I can tell, the bug is that the used limits API is exposed to non-admin users. The policy is using RULE_ADMIN_API [1] but I think maybe it doesn't work because the path for both "limits" and "used limits" is "/limits".
But maybe this has been exposed so long that quota-sets should be changed to have parity.
[1] https:/ /github. com/openstack/ nova/blob/ 48268c7/ nova/policies/ used_limits. py#L27