use neutron;
SELECT subnets.project_id
FROM   subnets
       LEFT OUTER JOIN networkrbacs
                    ON subnets.network_id = networkrbacs.object_id
WHERE  subnets.project_id = 'bf02b386ec434f06b66036313638e66a'
        OR networkrbacs.action = 'access_as_shared'
           AND ( networkrbacs.target_tenant = 'bf02b386ec434f06b66036313638e66a'
                  OR networkrbacs.target_tenant = '*' )