Files
barbican/etc/barbican/policy.json
T
Chelsea Winfree 7fcf415515 Adding initial update logic for orders
Adding the ability to update orders for certificates
in the controller. Connects the update order all the way
to the certificate resources. Also updated an issue
if order type was not listed, nothing would happen.

Implements: blueprint add-ssl-ca-support
Change-Id: I08e58cc618c5e21520f4d46cc35e10da1a02d0c8
2014-09-04 07:01:42 -05:00

36 lines
1.4 KiB
JSON

{
"version:get": "@",
"secret:decrypt": "rule:all_but_audit",
"secret:get": "rule:all_users",
"secret:put": "rule:admin_or_creator",
"secret:delete": "rule:admin",
"secrets:post": "rule:admin_or_creator",
"secrets:get": "rule:all_but_audit",
"orders:post": "rule:admin_or_creator",
"orders:get": "rule:all_but_audit",
"order:get": "rule:all_users",
"order:put":"rule:admin_or_creator",
"order:delete": "rule:admin",
"consumer:get": "rule:all_users",
"consumers:get": "rule:all_users",
"consumers:post": "rule:admin",
"consumers:delete": "rule:admin",
"containers:post": "rule:admin_or_creator",
"containers:get": "rule:all_but_audit",
"container:get": "rule:all_users",
"container:delete": "rule:admin",
"admin": "role:admin",
"observer": "role:observer",
"creator": "role:creator",
"audit": "rule:audit",
"admin_or_user_does_not_work": "project_id:%(project_id)s",
"admin_or_user": "role:admin or project_id:%(project_id)s",
"admin_or_creator": "role:admin or role:creator",
"all_but_audit": "role:admin or role:observer or role:creator",
"all_users": "role:admin or role:observer or role:creator or role:audit",
"transport_key:get": "rule:all_users",
"transport_key:delete": "rule:admin",
"transport_keys:get": "rule:all_users",
"transport_keys:post": "rule:admin"
}