Fine-grained policy control about security-group for OpenStack Compute (nova)

Now, actions about security groups are only controlled by rule 'compute:security_groups'. So policy rules like index/create/update/delete not works. I hope we can get fine-grained controls on security-group policy.