From ca2091d5a9c9c3e99afc386b7f3c334951c8f16e Mon Sep 17 00:00:00 2001
From: Slawek Kaplonski <skaplons@redhat.com>
Date: Fri, 23 Apr 2021 12:50:56 +0200
Subject: [PATCH] Change wrong "admin" scope in floatingip_pools to correct
 "system"

Scope "admin" was added there probably by mistake during the migration
to the new RBAC policies. It should be "system" instead and this patch
fixes it.

Partially-Implements blueprint: secure-rbac-roles

Change-Id: Ied35389ce7ab3dda9ff99046ea19a18406e0e2ce
---
 neutron/conf/policies/floatingip_pools.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/neutron/conf/policies/floatingip_pools.py b/neutron/conf/policies/floatingip_pools.py
index e05d92265d3..9efdcdc251c 100644
--- a/neutron/conf/policies/floatingip_pools.py
+++ b/neutron/conf/policies/floatingip_pools.py
@@ -29,7 +29,7 @@ rules = [
                 'path': '/floatingip_pools',
             },
         ],
-        scope_types=['admin', 'project'],
+        scope_types=['system', 'project'],
         deprecated_rule=policy.DeprecatedRule(
             name='get_floatingip_pool',
             check_str=base.RULE_ANY,