diff --git a/watcher/api/controllers/v1/audit.py b/watcher/api/controllers/v1/audit.py index 81fa97319..41c5ad40c 100644 --- a/watcher/api/controllers/v1/audit.py +++ b/watcher/api/controllers/v1/audit.py @@ -639,8 +639,8 @@ class AuditsController(rest.RestController): context = pecan.request.context audit_to_delete = api_utils.get_resource( 'Audit', audit, eager=True) - policy.enforce(context, 'audit:update', audit_to_delete, - action='audit:update') + policy.enforce(context, 'audit:delete', audit_to_delete, + action='audit:delete') initial_state = audit_to_delete.state new_state = objects.audit.State.DELETED diff --git a/watcher/api/controllers/v1/audit_template.py b/watcher/api/controllers/v1/audit_template.py index 8f4c3b373..8dbc2fae5 100644 --- a/watcher/api/controllers/v1/audit_template.py +++ b/watcher/api/controllers/v1/audit_template.py @@ -688,8 +688,8 @@ class AuditTemplatesController(rest.RestController): context = pecan.request.context audit_template_to_delete = api_utils.get_resource('AuditTemplate', audit_template) - policy.enforce(context, 'audit_template:update', + policy.enforce(context, 'audit_template:delete', audit_template_to_delete, - action='audit_template:update') + action='audit_template:delete') audit_template_to_delete.soft_delete()