diff --git a/cinder/policies/volumes.py b/cinder/policies/volumes.py index be29f724581..9ae076a57a9 100644 --- a/cinder/policies/volumes.py +++ b/cinder/policies/volumes.py @@ -83,11 +83,17 @@ volumes_policies = [ policy.DocumentedRuleDefault( name=UPDATE_POLICY, check_str=base.RULE_ADMIN_OR_OWNER, - description="Update volume.", + description="Update volume or update a volume's bootable status.", operations=[ { 'method': 'PUT', 'path': '/volumes' + }, + # The API below calls the volume update API internally, which in + # turn enforces the update policy. + { + 'method': 'POST', + 'path': '/volumes/{volume_id}/action (os-set_bootable)' } ]), policy.DocumentedRuleDefault(