openstack team mailing list archive

[Wyllys Ingersoll <Wyllys.Ingersoll@xxxxxxxxxx>]

On Mar 12, 2013, at 6:56 PM, Kieran Spear <kispear@xxxxxxxxx> wrote:

> Hi Wyllys,
> 
> On 13 March 2013 04:19, Wyllys Ingersoll <Wyllys.Ingersoll@xxxxxxxxxx> wrote:
>> Can someone point me to docs describing how to add/modify/delete permissions for a horizon panel?
>> 
>> I want a non-admin user to be able to access the Swift object-store containers panel in horizon.  Currently, the containers panel.py has the permissions set to:
>>    permissions = ('openstack.services.object-store',),
>> 
>> Only users with "Admin" role seem to have access to this panel.  Can this be changed, and if so, where do I look to make the changes?
> 
> This permission comes from your keystone service catalog. If you have
> an "object-store" entry in your catalog, then all users should see
> this.


I figured it out.  The swift proxy-config had the following entry:

[filter:keystoneauth]
use = egg:swift#keystoneauth
operator_roles = admin, swiftoperator

But I did not have any "swift operator" role defined. I must have cut-and-pasted that entry from an online guide somewhere.  I changed "swiftoperator" to "Member" and now the non-admin users can access the container information.

thanks,
-Wyllys