Description of problem: The heat packages in RDO don't include the /etc/heat/policy.json file, which results in a potentially less secure installation because access to the APIs is not restricted for the in-instance users Version-Release number of selected component (if applicable): openstack-heat-2013.1-1.3.fc19.src.rpm How reproducible: Always Steps to Reproduce: 1. Install heat from RDO repos 2. Note that /etc/heat/policy.json is missing 3. See warning in API logs: WARNING heat.common.policy [-] Unable to find policy file Actual results: Expected results: Additional info:
This has been fixed in RDO, specifically in openstack-heat-common.