3f7cc0a460
This change prepares the zaqar project to start implementing policies in code. Subsequent patches will register more zaqar policies in code and remove the corresponding entry from the policy file maintained in source. This is part of a community effort to provide better user experience for those having to maintain RBAC policy. More information on this effort can be found below: https://governance.openstack.org/tc/goals/queens/policy-in-code.html bp policy-and-docs-in-code Change-Id: I5d804b589df215fddc18257fc9f05ba2e0d708bd
47 lines
1.1 KiB
Plaintext
47 lines
1.1 KiB
Plaintext
{
|
|
"default": "rule:admin_or_owner",
|
|
|
|
"queues:get_all": "",
|
|
"queues:create": "",
|
|
"queues:get": "",
|
|
"queues:delete": "",
|
|
"queues:update": "",
|
|
"queues:stats": "",
|
|
"queues:share": "",
|
|
"queues:purge": "",
|
|
|
|
"messages:get_all": "",
|
|
"messages:create": "",
|
|
"messages:get": "",
|
|
"messages:delete": "",
|
|
"messages:delete_all": "",
|
|
|
|
"claims:get_all": "",
|
|
"claims:create": "",
|
|
"claims:get": "",
|
|
"claims:delete": "",
|
|
"claims:update": "",
|
|
|
|
"subscription:get_all": "",
|
|
"subscription:create": "",
|
|
"subscription:get": "",
|
|
"subscription:delete": "",
|
|
"subscription:update": "",
|
|
"subscription:confirm": "",
|
|
|
|
"pools:get_all": "rule:context_is_admin",
|
|
"pools:create": "rule:context_is_admin",
|
|
"pools:get": "rule:context_is_admin",
|
|
"pools:delete": "rule:context_is_admin",
|
|
"pools:update": "rule:context_is_admin",
|
|
|
|
"flavors:get_all": "",
|
|
"flavors:create": "rule:context_is_admin",
|
|
"flavors:get": "",
|
|
"flavors:delete": "rule:context_is_admin",
|
|
"flavors:update": "rule:context_is_admin",
|
|
|
|
"ping:get": "",
|
|
"health:get": "rule:context_is_admin"
|
|
}
|