x/ranger
Code Issues Proposed changes

[US429508] Adding customer_creator flavor_creator admin image roles

Browse Source 
Change-Id: I5e7217abda058197e3633b6f11642fcabbdd6d15
This commit is contained in:
Mclean, Aaron (am9518) 2018-07-30 11:08:41 -05:00 committed by Aaron McLean
parent e2a0179fb6
commit 37f6929da9
3 changed files with 37 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
orm/services/customer_manager/cms_rest/etc/policy.json
View File

@ -4,19 +4,25 @@
"admin": "role:admin and tenant:admin or role:admin and tenant:services",
"admin_support": "role:admin_support and tenant:admin or role:admin_support and tenant:services",
"admin_viewer": "role:admin_viewer and tenant:admin or role:admin_viewer and tenant:services",
"creator": "role:ranger_customer_creator and tenant:admin or role:ranger_customer_creator and tenant:services",
"admin_or_creator": "rule:admin or rule:creator",
"admin_or_support": "rule:admin or rule:admin_support",
"admin_or_support_or_viewer": "rule:admin or rule:admin_support or rule:admin_viewer",
"admin_or_support_or_creator": "rule:admin or rule:admin_support or rule:creator",
"customers:get_one": "rule:admin_or_support_or_viewer",
"customers:get_all": "rule:admin_or_support_or_viewer",
"customers:create": "rule:admin_or_support",
"customers:update": "rule:admin",
"admin_or_support_or_viewer": "rule:admin or rule:admin_support or rule:admin_viewer",
"admin_or_support_or_viewer_or_creator": "rule:admin or rule:admin_support or rule:admin_viewer or rule:creator",
"customers:get_one": "rule:admin_or_support_or_viewer_or_creator",
"customers:get_all": "rule:admin_or_support_or_viewer_or_creator",
"customers:create": "rule:admin_or_support_or_creator",
"customers:update": "rule:admin_or_creator",
"customers:delete": "rule:admin",
"customers:add_region": "rule:admin_or_support",
"customers:update_region": "rule:admin",
"customers:delete_region": "rule:admin",
"customers:add_region": "rule:admin_or_support_or_creator",
"customers:update_region": "rule:admin_or_creator",
"customers:delete_region": "rule:admin_or_creator",
"customers:add_region_user": "rule:admin_or_support",
"customers:update_region_user": "rule:admin",
@ -26,8 +32,8 @@
"customers:update_default_user": "rule:admin",
"customers:delete_default_user": "rule:admin",
"customers:add_metadata": "rule:admin_or_support",
"customers:update_metadata": "rule:admin",
"customers:add_metadata": "rule:admin_or_support_or_creator",
"customers:update_metadata": "rule:admin_or_creator",
"customers:enable": "rule:admin"
"customers:enable": "rule:admin_or_support_or_creator"
}

30
orm/services/flavor_manager/fms_rest/etc/policy.json
View File

@ -4,29 +4,35 @@
"admin": "role:admin and tenant:admin or role:admin and tenant:services",
"admin_support": "role:admin_support and tenant:admin or role:admin_support and tenant:services",
"admin_viewer": "role:admin_viewer and tenant:admin or role:admin_viewer and tenant:services",
"creator": "role:ranger_flavor_creator and tenant:admin or role:ranger_flavor_creator and tenant:services",
"admin_or_creator": "rule:admin or rule:creator",
"admin_or_support": "rule:admin or rule:admin_support",
"admin_or_support_or_viewer": "rule:admin or rule:admin_support or rule:admin_viewer",
"admin_or_support_or_creator": "rule:admin or rule:admin_support or rule:creator",
"flavor:create": "rule:admin_or_support",
"flavor:get_one": "rule:admin_or_support_or_viewer",
"flavor:get_all": "rule:admin_or_support_or_viewer",
"admin_or_support_or_viewer": "rule:admin or rule:admin_support or rule:admin_viewer",
"admin_or_support_or_viewer_or_creator": "rule:admin or rule:admin_support or rule:admin_viewer or rule:creator",
"flavor:get_one": "rule:admin_or_support_or_viewer_or_creator",
"flavor:get_all": "rule:admin_or_support_or_viewer_or_creator",
"flavor:create": "rule:admin_or_support_or_creator",
"flavor:delete": "rule:admin",
"flavor:get_flavor_extra_specs": "rule:admin_or_support_or_viewer",
"flavor:add_flavor_extra_specs": "rule:admin_or_support",
"flavor:replace_flavor_extra_specs": "rule:admin",
"flavor:get_flavor_extra_specs": "rule:admin_or_support_or_viewer_or_creator",
"flavor:add_flavor_extra_specs": "rule:admin_or_support_or_creator",
"flavor:replace_flavor_extra_specs": "rule:admin_or_creator",
"flavor:delete_flavor_extra_specs": "rule:admin",
"flavor:add_flavor_regions": "rule:admin_or_support",
"flavor:add_flavor_regions": "rule:admin_or_support_or_creator",
"flavor:delete_flavor_region": "rule:admin",
"flavor:get_flavor_tags": "rule:admin_or_support_or_viewer",
"flavor:add_flavor_tags": "rule:admin_or_support",
"flavor:replace_flavor_tags": "rule:admin",
"flavor:get_flavor_tags": "rule:admin_or_support_or_viewer_or_creator",
"flavor:add_flavor_tags": "rule:admin_or_support_or_creator",
"flavor:replace_flavor_tags": "rule:admin_or_creator",
"flavor:delete_flavor_tags": "rule:admin",
"flavor:add_flavor_tenants": "rule:admin_or_support",
"flavor:add_flavor_tenants": "rule:admin_or_support_or_creator",
"flavor:delete_flavor_tenant": "rule:admin"
}

4
orm/services/image_manager/ims/etc/policy.json
View File

@ -1,7 +1,7 @@
{
"default": "!",
"admin": "role:admin and tenant:admin or role:admin and tenant:services",
"admin": "role:admin and tenant:admin or role:admin and tenant:services or role:admin_image and tenant:admin or role:admin_image and tenant:services",
"admin_support": "role:admin_support and tenant:admin or role:admin_support and tenant:services",
"admin_viewer": "role:admin_viewer and tenant:admin or role:admin_viewer and tenant:services",
@ -13,7 +13,7 @@
"image:get_one": "rule:admin_or_support_or_viewer",
"image:update": "rule:admin",
"image:delete": "rule:admin",
"image:enable": "rule:admin",
"image:enable": "rule:admin_or_support",
"region:create": "rule:admin_or_support",
"region:update": "rule:admin",