Comment 2 for bug 973708

I think this is an important issue that needs to be resolved. The implication of what you are saying is that whether or not a particular Compute API requires admin is not part of the spec for the API. Of course operators can implement their own policies. They can also change the code even if there was no policy file mechanism. But I think it would be most helpful for users and openstack as a whole if the admin-ness of official openstack apis, whether deployed as extensions or not, was part of the spec.