vmware-nsx/etc/policy.d/routers.json
Gary Kotton f1907bf1f5 Remove duplicate policy entries
update_router:external_gateway_info and create_router:external_gateway_info
are the same as those defined in neutron.

We should only have the ones that are different.

Change-Id: I7cbf03722567401ec3622e941d4b4af1cf63c0c9
2018-04-03 07:49:18 +03:00

18 lines
685 B
JSON

{
"create_router:distributed": "rule:admin_or_owner",
"get_router:distributed": "rule:admin_or_owner",
"update_router:distributed": "rule:admin_or_owner",
"get_router:ha": "rule:admin_only",
"create_router": "rule:regular_user",
"create_router:external_gateway_info:enable_snat": "rule:admin_or_owner",
"create_router:ha": "rule:admin_only",
"get_router": "rule:admin_or_owner",
"update_router:external_gateway_info:enable_snat": "rule:admin_or_owner",
"update_router:ha": "rule:admin_only",
"delete_router": "rule:admin_or_owner",
"add_router_interface": "rule:admin_or_owner",
"remove_router_interface": "rule:admin_or_owner",
}