diff --git a/neutron/conf/policies/base.py b/neutron/conf/policies/base.py index 4b1ad4a515c..661b6042f94 100644 --- a/neutron/conf/policies/base.py +++ b/neutron/conf/policies/base.py @@ -111,6 +111,10 @@ rules = [ RULE_ADMIN_OR_NET_OWNER), description=('Rule for resource owner, ' 'admin or network owner access')), + policy.RuleDefault( + 'network_owner', + 'tenant_id:%(network:tenant_id)s', + description='Rule for network owner access'), policy.RuleDefault( 'admin_only', 'rule:context_is_admin', @@ -133,6 +137,10 @@ rules = [ policy_or('rule:context_is_admin', 'tenant_id:%(ext_parent:tenant_id)s'), description='Rule for common parent owner check'), + policy.RuleDefault( + 'ext_parent_owner', + 'tenant_id:%(ext_parent:tenant_id)s', + description='Rule for common parent owner check'), ]