Douglas Mendizabal
ef40e55b01
The Verifications resource POC should be removed from Barbican. Change-Id: I5823cb94314a2c2f497f045c620dde974741a004
27 lines
1.0 KiB
JSON
27 lines
1.0 KiB
JSON
{
|
|
"version:get": "@",
|
|
"secret:decrypt": "rule:all_but_audit",
|
|
"secret:get": "rule:all_users",
|
|
"secret:put": "rule:admin_or_creator",
|
|
"secret:delete": "rule:admin",
|
|
"secrets:post": "rule:admin_or_creator",
|
|
"secrets:get": "rule:all_but_audit",
|
|
"orders:post": "rule:admin_or_creator",
|
|
"orders:get": "rule:all_but_audit",
|
|
"order:get": "rule:all_users",
|
|
"order:delete": "rule:admin",
|
|
"containers:post": "rule:admin_or_creator",
|
|
"containers:get": "rule:all_but_audit",
|
|
"container:get": "rule:all_users",
|
|
"container:delete": "rule:admin",
|
|
"admin": "role:admin",
|
|
"observer": "role:observer",
|
|
"creator": "role:creator",
|
|
"audit": "rule:audit",
|
|
"admin_or_user_does_not_work": "project_id:%(project_id)s",
|
|
"admin_or_user": "role:admin or project_id:%(project_id)s",
|
|
"admin_or_creator": "role:admin or role:creator",
|
|
"all_but_audit": "role:admin or role:observer or role:creator",
|
|
"all_users": "role:admin or role:observer or role:creator or role:audit"
|
|
}
|