openstack
/
neutron
Code Issues Proposed changes

Allow system_scope personas (SYSTEM_ADMIN) to create router 

Related-blueprint: bp/secure-rbac-roles
Change-Id: I8a851b17f3a398f1318800b5a97eb66330c91ce5
This commit is contained in:
Slawek Kaplonski 2021-04-12 15:16:58 +02:00
parent 51cccd4b1a
commit 26e0d47cc5
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
neutron/conf/policies/router.py
View File

@ -40,7 +40,7 @@ rules = [
policy.DocumentedRuleDefault(
name='create_router',
check_str=base.SYSTEM_ADMIN_OR_PROJECT_MEMBER,
scope_types=['project'],
scope_types=['system', 'project'],
description='Create a router',
operations=ACTION_POST,
deprecated_rule=policy.DeprecatedRule(