Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

I have another question, in add_router_interface() function, I see: " policy.enforce(context, "extension:router:add_router_interface", self._make_router_dict(router)) "

in the default policy.json: "admin_or_owner": [["role:admin"], ["tenant_id:%(tenant_id)s"]], "extension:router:add_router_interface": [["rule:admin_or_owner"]],

so I think tenant(not admin) of the router can use "quantum router-interface-add"(because tenant_id in context is the same as owner of the router), am I wrong? Maybe I should figure it out on my machine.