Re: [openstack-dev] Neutron permission issue

2014-07-11 Thread Ajay Kalambur (akalambu)
Never mind figured it out the rule is on enable_snat inside external gateway info that was the issue But I think there is an issue with update because the message is misleading when I try to update with external gateway info and enable_snat. I get a message that Resource not found when in realit

Re: [openstack-dev] Neutron permission issue

2014-07-11 Thread Ajay Kalambur (akalambu)
Hi The issue seems to be the following default config in Neutron policy "create_router:external_gateway_info:enable_snat": "rule:admin_only", "update_router:external_gateway_info:enable_snat": "rule:admin_only", Puzzling part is from horizon when I set an external gateway for a router is

[openstack-dev] Neutron permission issue

2014-07-11 Thread Ajay Kalambur (akalambu)
Hi As a tenant when I try to create a router and associate a gateway with the router as a two step process in Horizon things work fine. Now when I want to do the same thing through a create router API call with request below I get permission denied to create router { "router": { "name": "another