mon: more power for "profile mgr"

mgr modules are meant to be able to do management
type operations, even though they're mostly currently
doing monitoring.

Signed-off-by: John Spray <john.spray@redhat.com>

diff --git a/src/mon/MonCap.cc b/src/mon/MonCap.cc
index 997bb15ba842869d0764435cd42981ac22d02362..af98eb2d863aeb81bc8d5a7401a74a6d71c43889 100644 (file)
--- a/src/mon/MonCap.cc
+++ b/src/mon/MonCap.cc
@@ -170,9 +170,9 @@ void MonCapGrant::expand_profile_mon(const EntityName& name) const
   }
   if (profile == "mgr") {
     profile_grants.push_back(MonCapGrant("mgr", MON_CAP_ALL));
-    profile_grants.push_back(MonCapGrant("log", MON_CAP_W));
-    profile_grants.push_back(MonCapGrant("mon", MON_CAP_R));
-    profile_grants.push_back(MonCapGrant("mds", MON_CAP_R));
+    profile_grants.push_back(MonCapGrant("log", MON_CAP_R | MON_CAP_W));
+    profile_grants.push_back(MonCapGrant("mon", MON_CAP_R | MON_CAP_W));
+    profile_grants.push_back(MonCapGrant("mds", MON_CAP_R | MON_CAP_W));
     profile_grants.push_back(MonCapGrant("osd", MON_CAP_R | MON_CAP_W));
     profile_grants.push_back(MonCapGrant("auth", MON_CAP_R | MON_CAP_X));
     profile_grants.push_back(MonCapGrant("config-key", MON_CAP_R | MON_CAP_W));