diff --git a/files/rootwrap.d/volume.filters b/files/rootwrap.d/volume.filters
index 69cf66e3..49ee72d6 100644
--- a/files/rootwrap.d/volume.filters
+++ b/files/rootwrap.d/volume.filters
@@ -222,3 +222,7 @@ ploop: CommandFilter, ploop, root
 
 # initiator/connector.py:
 drv_cfg: CommandFilter, /opt/emc/scaleio/sdc/bin/drv_cfg, root, /opt/emc/scaleio/sdc/bin/drv_cfg, --query_guid
+
+# cinder/volume/drivers/quobyte.py
+getfattr: CommandFilter, getfattr, root
+mount.quobyte: CommandFilter, getfattr, root
diff --git a/templates/policy.json.j2 b/templates/policy.json.j2
index 225257ff..c38bfaba 100644
--- a/templates/policy.json.j2
+++ b/templates/policy.json.j2
@@ -5,6 +5,7 @@
     "admin_api": "is_admin:True or (role:admin and is_admin_project:True)",
 
     "volume:create": "",
+    "volume:create_from_image": "",
     "volume:delete": "rule:admin_or_owner",
     "volume:force_delete": "rule:admin_api",
     "volume:get": "rule:admin_or_owner",