Comment 1 for bug 1463131

It's possible there's no "update" command in the API and the client is issuing "DELETE" then "POST" commands. The way to find out is to do: nova --debug secgroup-update <secgroup> <name> <description> and you can see all the API commands go. Do that and let me know what you find out. I'm trying myself with my various cloud accounts but so far I don't have one where the policy lets me do this.