From: Ramana Raja <rraja@redhat.com>
Date: Wed, 10 Jul 2019 19:03:20 +0000 (+0530)
Subject: mon/MonCap: allow 'profile mgr' to create/update/del auth IDs
X-Git-Tag: v15.2.10~20^2~18
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=548815bb3ebabf983024bf9b246cc2a2bd82c59c;p=ceph.git

mon/MonCap: allow 'profile mgr' to create/update/del auth IDs

Signed-off-by: Ramana Raja <rraja@redhat.com>
(cherry picked from commit d3aea5579778a73dc2418e7b137dc21717944c3e)
---

diff --git a/src/mon/MonCap.cc b/src/mon/MonCap.cc
index b5c5ab6a5bf..c4f75050452 100644
--- a/src/mon/MonCap.cc
+++ b/src/mon/MonCap.cc
@@ -199,7 +199,7 @@ void MonCapGrant::expand_profile(const EntityName& name) const
     profile_grants.push_back(MonCapGrant("mds", MON_CAP_R | MON_CAP_W));
     profile_grants.push_back(MonCapGrant("fs", MON_CAP_R | MON_CAP_W));
     profile_grants.push_back(MonCapGrant("osd", MON_CAP_R | MON_CAP_W));
-    profile_grants.push_back(MonCapGrant("auth", MON_CAP_R | MON_CAP_X));
+    profile_grants.push_back(MonCapGrant("auth", MON_CAP_R | MON_CAP_W | MON_CAP_X));
     profile_grants.push_back(MonCapGrant("config-key", MON_CAP_R | MON_CAP_W));
     profile_grants.push_back(MonCapGrant("config", MON_CAP_R | MON_CAP_W));
     // cephadm orchestrator provisions new daemon keys and updates caps