Fix missing check for admin/adv_service

Adds a missing skip for a network ownership check for admins
and advanced services. This was found via an API test.

Change-Id: I796f6abf56dc7ff0f374b9912b92085f4a993a27

diff --git a/neutron/pecan_wsgi/hooks/ownership_validation.py b/neutron/pecan_wsgi/hooks/ownership_validation.py
index d121a03c7ea1e49d576817203917726961d61066..73ba8d0bcc7b4d10d76d3842714079daff96d302 100644 (file)
--- a/neutron/pecan_wsgi/hooks/ownership_validation.py
+++ b/neutron/pecan_wsgi/hooks/ownership_validation.py
@@ -34,7 +34,8 @@ class OwnershipValidationHook(hooks.PecanHook):
         # TODO(salvatore-orlando): consider whether this check can be folded
         # in the policy engine
         rtype = request.resource_type
-        if rtype not in ('port', 'subnet'):
+        if (request.context.is_admin or request.context.is_advsvc or
+                rtype not in ('port', 'subnet')):
             return
         plugin = manager.NeutronManager.get_plugin()
         network = plugin.get_network(request.context,