# HG changeset patch
# User Marcus Granado <marcus.granado@xxxxxxxxxx>
# Date 1265033392 0
# Node ID 7ed4bfa16208f5574246fa4bcf486bc53332fe54
# Parent  dc8d8abdc3287b5250170ec5e4cc50b377007324
CA-35968: read-only roles can call pool.ha_compute_hypothetical_max_host_failures_to_tolerate

Signed-off-by: Marcus Granado <marcus.granado@xxxxxxxxxxxxx>

diff -r dc8d8abdc328 -r 7ed4bfa16208 ocaml/idl/datamodel.ml
--- a/ocaml/idl/datamodel.ml	Mon Feb 01 13:15:09 2010 +0000
+++ b/ocaml/idl/datamodel.ml	Mon Feb 01 14:09:52 2010 +0000
@@ -4742,7 +4742,7 @@
   ~doc:"Returns the maximum number of host failures we could tolerate before we would be unable to restart the provided VMs"
   ~params:[ Map(Ref _vm, String), "configuration", "Map of protected VM reference to restart priority" ]
   ~result:(Int, "maximum value for ha_host_failures_to_tolerate given provided configuration")
-  ~allowed_roles:_R_POOL_OP
+  ~allowed_roles:_R_READ_ONLY
   ()
 
 let pool_ha_compute_vm_failover_plan = call ~flags:[`Session]