Comment 7 for bug 2023679

Another question related to this issue: do You have any other custom policies in Your policy.yaml file? If so, can You share it with us?

I was trying to reproduce the issue You reported and I wasn't able to do that but it was actually failing for me on GET network request which is done internally during create subnet action.
But regardless I was able to reproduce it or not, I think You found mistake in the default new policies and I will propose patch to change that.

@fungi: I don't think we should treat this issue as private security issue - this new policy is used by default just in master branch, in any stable versions it's not enabled by default. It also can be simply overwritten in the custom policy file if needed.