Re: [openstack-dev] Neutron permission issue

2014-07-11 Thread Ajay Kalambur (akalambu)
Never mind figured it out the rule is on enable_snat inside external gateway info that was the issue But I think there is an issue with update because the message is misleading when I try to update with external gateway info and enable_snat. I get a message that Resource not found when in realit

Re: [openstack-dev] Neutron permission issue

2014-07-11 Thread Ajay Kalambur (akalambu)
Hi The issue seems to be the following default config in Neutron policy "create_router:external_gateway_info:enable_snat": "rule:admin_only", "update_router:external_gateway_info:enable_snat": "rule:admin_only", Puzzling part is from horizon when I set an external gateway for a router is