openstack/zun
Code Issues Proposed changes

Refine default policy

Browse Source 
The details about bug:
https://bugs.launchpad.net/zun/+bug/1703016

Change-Id: Id4bba0b41d815f8c37659b1ce2cb35fbc9edacf5
Closes-Bug: #1703016
This commit is contained in:
00129207 2017-07-08 10:33:37 +08:00 committed by feng.shengqin
parent d0bd3a418f
commit 545b145bc4
1 changed files with 21 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
etc/zun/policy.json
View File

@ -3,32 +3,31 @@
"admin_or_owner": "is_admin:True or project_id:%(project_id)s",
"default": "rule:admin_or_owner",
"admin_api": "rule:context_is_admin",
"admin_or_user": "is_admin:True or user_id:%(user_id)s",
"container:create": "rule:default",
"container:delete": "rule:admin_or_user",
"container:delete": "rule:default",
"container:get": "rule:default",
"container:get_all": "rule:default",
"container:update": "rule:admin_or_user",
"container:start": "rule:admin_or_user",
"container:stop": "rule:admin_or_user",
"container:reboot": "rule:admin_or_user",
"container:pause": "rule:admin_or_user",
"container:unpause": "rule:admin_or_user",
"container:logs": "rule:admin_or_user",
"container:execute": "rule:admin_or_user",
"container:execute_resize": "rule:admin_or_user",
"container:kill": "rule:admin_or_user",
"container:update": "rule:admin_or_user",
"container:rename": "rule:admin_or_user",
"container:attach": "rule:admin_or_user",
"container:resize": "rule:admin_or_user",
"container:top": "rule:admin_or_user",
"container:get_archive": "rule:admin_or_user",
"container:put_archive": "rule:admin_or_user",
"container:stats": "rule:admin_or_user",
"container:commit": "rule:admin_or_user",
"container:add_security_group": "rule:admin_or_user",
"container:update": "rule:default",
"container:start": "rule:default",
"container:stop": "rule:default",
"container:reboot": "rule:default",
"container:pause": "rule:default",
"container:unpause": "rule:default",
"container:logs": "rule:default",
"container:execute": "rule:default",
"container:execute_resize": "rule:default",
"container:kill": "rule:default",
"container:update": "rule:default",
"container:rename": "rule:default",
"container:attach": "rule:default",
"container:resize": "rule:default",
"container:top": "rule:default",
"container:get_archive": "rule:default",
"container:put_archive": "rule:default",
"container:stats": "rule:default",
"container:commit": "rule:default",
"container:add_security_group": "rule:default",
"image:pull": "rule:default",
"image:get_all": "rule:default",