Admin user is not able to update the shared access for a network.

[kavitha h r]

Admin user is not able to update the shared access for a network.
Steps to reproduce:
a) Create a network test from demo user.
b) As an admin user, create a subnet for that network.
c) Now, make the network shared using command “neutron net-update test –shared”.
d) Now, try to make the shared as false for the same network by using the command “neutron net-update test –shared false”.
Here it throws an error saying "unable to reconfigure sharing settings for network test. Multiple tenants are using it."

[daixianmeng (daixianmeng)]

If the network is not shared,Only demo user can use.
If you update the network shared,all user can use.

[Gary Kotton (garyk)]

There are two cases when the exception above is thrown:
1. when there are ports using the network
2. when certain tenants are unable to access the network

I am not sure that I understand the use case - an admin should create a shared network and it is not clear why an admin would update a tenant network to a shared network.
Does RBAC address this?

[kavitha h r (kavitha1)]

Hi Gary

There are no ports using the network.
Admin user is able to make the tenant network as shared but he is not able to make shared as false.
When the admin user make the network as shared one RBAC gets created and if we delete that RBAC the shared access becomes false.

[Gary Kotton (garyk)]

Thanks. I am not sure that this is worth fixing as the 'shared' should be deprecated and the RBAC code should be used.
I would note this as a limitation and not even sure its worth the effort to address