blazar/etc/policy.json
Masahito Muroi 68d769bf71 Migrate climate namespace to blazar
Although the Climate project was renamed to Blazar in 2014, the code has
still been using the climate namespace.

This patch moves all code to the blazar directory and allows users and
operators to use the 'blazar' command namespace. The 'climate' namespace
remains O release to allow users of Blazar time to move their own
code to the blazar namespace, but will be removed in P release
development cycle.

Change-Id: Icbe6fab1051aae4ac819982a1fa4f323cb0bf2d0
Partial-Bug: #1662734
2017-03-02 09:36:14 +00:00

21 lines
616 B
JSON

{
"admin": "is_admin:True or role:admin or role:masterofuniverse",
"admin_or_owner": "rule:admin or project_id:%(project_id)s",
"default": "!",
"admin_api": "rule:admin",
"blazar:leases:get": "rule:admin_or_owner",
"blazar:leases:create": "rule:admin_or_owner",
"blazar:leases:delete": "rule:admin_or_owner",
"blazar:leases:update": "rule:admin_or_owner",
"blazar:plugins:get": "@",
"blazar:oshosts:get": "rule:admin_or_owner",
"blazar:oshosts:create": "rule:admin_api",
"blazar:oshosts:delete": "rule:admin_api",
"blazar:oshosts:update": "rule:admin_api"
}