Glance allows admins to define custom rules regarding CRUD (create/read/update/delete) operations on custom image properties[1]. This is done by setting the property_protection_file option in glance-api.conf to the path to an INI file defining such permissions.

We believe this feature has not seen a lot of use, and are thinking about removing it. We would like to know what you think about this.