From 48680a054fa9683ed2b40a61661ceaf0dcd42cb8 Mon Sep 17 00:00:00 2001 From: Gary Kotton Date: Sun, 16 Jul 2017 23:29:53 -0700 Subject: [PATCH] Enable admin or owner to configure snat Change-Id: I9e1fe4669c7792063e33b7c87807d0acda681da8 --- etc/policy.d/routers.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/etc/policy.d/routers.json b/etc/policy.d/routers.json index 77c8cad567..1b87338e36 100644 --- a/etc/policy.d/routers.json +++ b/etc/policy.d/routers.json @@ -5,10 +5,10 @@ "get_router:ha": "rule:admin_only", "create_router": "rule:regular_user", - "create_router:external_gateway_info:enable_snat": "rule:admin_only", + "create_router:external_gateway_info:enable_snat": "rule:admin_or_owner", "create_router:ha": "rule:admin_only", "get_router": "rule:admin_or_owner", - "update_router:external_gateway_info:enable_snat": "rule:admin_only", + "update_router:external_gateway_info:enable_snat": "rule:admin_or_owner", "update_router:ha": "rule:admin_only", "delete_router": "rule:admin_or_owner",