openstack/barbican
Code Issues Proposed changes

Merge "use of more readable policy language in policy file"

Browse Source
This commit is contained in:
Jenkins 2014-02-21 17:53:41 +00:00 committed by Gerrit Code Review
commit ef5b9eeb9a
1 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
etc/barbican/policy.json
View File

@ -18,13 +18,13 @@
"verifications:get": "rule:all_but_audit",
"verification:get": "rule:all_users",
"verification:delete": "rule:admin",
"admin": ["role:admin"],
"observer": ["role:observer"],
"creator": ["role:creator"],
"audit": ["rule:audit"],
"admin_or_user_does_not_work": ["project_id:%(project_id)s"],
"admin_or_user": ["role:admin", "project_id:%(project_id)s"],
"admin_or_creator": ["role:admin", "role:creator"],
"all_but_audit": ["role:admin", "role:observer", "role:creator"],
"all_users": ["role:admin", "role:observer", "role:creator", "role:audit"]
}
"admin": "role:admin",
"observer": "role:observer",
"creator": "role:creator",
"audit": "rule:audit",
"admin_or_user_does_not_work": "project_id:%(project_id)s",
"admin_or_user": "role:admin or project_id:%(project_id)s",
"admin_or_creator": "role:admin or role:creator",
"all_but_audit": "role:admin or role:observer or role:creator",
"all_users": "role:admin or role:observer or role:creator or role:audit"
}