| *** mhen_ is now known as mhen | 02:18 | |
| mhen | fwiw, I just tried with non-admin user and the same scenario does not work | 10:40 |
|---|---|---|
| mhen | you cannot create a snapshot in project B of a volume from project A because the volume is not visible to a regular user across project boundaries | 10:41 |
| mhen | presumably due to the "volume:get_all" policy | 10:41 |
| noonedeadpunk | one thing about cinder, is that not everything is in fact covered by policies | 20:12 |
| noonedeadpunk | there're still quite some places with `is_admin` being hardcoded | 20:12 |
| noonedeadpunk | so it's not a given that behavior can actually be impacted by policy.... | 20:12 |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!