After investigation of the heat breakage, after
we update the policy.json. We discover
that the rbac have never worked as expected.
The only rule that works is role == admin. All other
just can't works.
So the policy file have been changed to, By default project
owner of the alarm should be able to change their alarms.
And anyone can create a new alarm.
Also the alarm definition is now passed to the policy enforcer
to allow it checks owner of the alarms.
Closes-bug: #1504495
Change-Id: I408d839eec84af46adb333a6ad5c49c890513fd0
dde9712152