Files
barbican/etc/barbican/policy.json
jfwood 1e952be2ac Add verification REST service to Barbican
Add initial REST resources and simple business logic (i.e. always return
'True' for the is-valid query). Add unit testing and verify works with
REST client.

Change-Id: Iccb3b2babe7be1907acae297ae8b479c3c3a247f
Implements: blueprint api-add-verification
2013-11-25 22:53:06 -06:00

26 lines
1.1 KiB
JSON

{
"version:get": "rule:all_users",
"secret:decrypt": "rule:all_but_audit",
"secret:get": "rule:all_users",
"secret:put": "rule:admin_or_creator",
"secret:delete": "rule:admin",
"secrets:post": "rule:admin_or_creator",
"secrets:get": "rule:all_but_audit",
"orders:post": "rule:admin_or_creator",
"orders:get": "rule:all_but_audit",
"order:get": "rule:all_users",
"order:delete": "rule:admin",
"verifications:post": "rule:admin_or_creator",
"verifications:get": "rule:all_but_audit",
"verification:get": "rule:all_users",
"verification:delete": "rule:admin",
"admin": ["role:admin"],
"observer": ["role:observer"],
"creator": ["role:creator"],
"audit": ["rule:audit"],
"admin_or_user_does_not_work": ["project_id:%(project_id)s"],
"admin_or_user": ["role:admin", "project_id:%(project_id)s"],
"admin_or_creator": ["role:admin", "role:creator"],
"all_but_audit": ["role:admin", "role:observer", "role:creator"],
"all_users": ["role:admin", "role:observer", "role:creator", "role:audit"]
}