Users with the "creator" role on a project can now delete secrets owned
by the project even if the user is different than the user that
originally created the secret. Previous to this fix a user with the
"creator" role was only allowed to delete a secret owned by the project
if they were also the same user that originally created, which was
inconsistent with the way that deletes are handled by other OpenStack
projects that integrate with Barbican.
This change does not affect the policy for delting private secrets
(i.e. secrets with the "project-access" flag set to "false").
Story: 2009791
Task: 44326
Change-Id: Ie3e3adc1ee02d770de050f5cfa8110774bb1f661
(cherry picked from commit 2620d14c5fae378a5e8d7d550d5ae8efb263d63a)
(cherry picked from commit 811a846a508a9e6d2a2e309bf7f6895ae9b6db03)
0b4532125a