openstack/barbican
Code Issues Proposed changes

use of more readable policy language in policy file

Browse Source 
Translate the existing policy file to use more
readable policy language syntax.

Change-Id: I3f86d849380aa942ce40af9a271c0af074f59ffd
This commit is contained in:
Arvind Tiwari 2014-02-18 12:58:34 -07:00
parent 9a2952dbb2
commit 7d52b191e6
1 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
etc/barbican/policy.json
View File

@ -18,13 +18,13 @@
"verifications:get": "rule:all_but_audit",
"verification:get": "rule:all_users",
"verification:delete": "rule:admin",
"admin": ["role:admin"],
"observer": ["role:observer"],
"creator": ["role:creator"],
"audit": ["rule:audit"],
"admin_or_user_does_not_work": ["project_id:%(project_id)s"],
"admin_or_user": ["role:admin", "project_id:%(project_id)s"],
"admin_or_creator": ["role:admin", "role:creator"],
"all_but_audit": ["role:admin", "role:observer", "role:creator"],
"all_users": ["role:admin", "role:observer", "role:creator", "role:audit"]
}
"admin": "role:admin",
"observer": "role:observer",
"creator": "role:creator",
"audit": "rule:audit",
"admin_or_user_does_not_work": "project_id:%(project_id)s",
"admin_or_user": "role:admin or project_id:%(project_id)s",
"admin_or_creator": "role:admin or role:creator",
"all_but_audit": "role:admin or role:observer or role:creator",
"all_users": "role:admin or role:observer or role:creator or role:audit"
}