Improvements to rule based access control for OpenStack Compute (nova)

The following is a proposal to improve the rule based api access in Nova. There are currently a number of issues which need to be addressed: 1. In some cases, despite having a rule defined in policy.json, a command can get blocked by the require_admin_context decorator within the sqlalchemy/api.py layer. If a user...