openstack/barbican
Code Issues Proposed changes

use of more readable policy language in policy file

Browse Source 
Translate the existing policy file to use more
readable policy language syntax.

Change-Id: I3f86d849380aa942ce40af9a271c0af074f59ffd
This commit is contained in:
Arvind Tiwari 2014-02-18 12:58:34 -07:00
parent 9a2952dbb2
commit 7d52b191e6
1 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
etc/barbican/policy.json
View File

@ -18,13 +18,13 @@
"verifications:get": "rule:all_but_audit", "verifications:get": "rule:all_but_audit",
"verification:get": "rule:all_users", "verification:get": "rule:all_users",
"verification:delete": "rule:admin", "verification:delete": "rule:admin",
"admin": ["role:admin"], "admin": "role:admin",
"observer": ["role:observer"], "observer": "role:observer",
"creator": ["role:creator"], "creator": "role:creator",
"audit": ["rule:audit"], "audit": "rule:audit",
"admin_or_user_does_not_work": ["project_id:%(project_id)s"], "admin_or_user_does_not_work": "project_id:%(project_id)s",
"admin_or_user": ["role:admin", "project_id:%(project_id)s"], "admin_or_user": "role:admin or project_id:%(project_id)s",
"admin_or_creator": ["role:admin", "role:creator"], "admin_or_creator": "role:admin or role:creator",
"all_but_audit": ["role:admin", "role:observer", "role:creator"], "all_but_audit": "role:admin or role:observer or role:creator",
"all_users": ["role:admin", "role:observer", "role:creator", "role:audit"] "all_users": "role:admin or role:observer or role:creator or role:audit"
} }