blazar/etc/policy.json

21 lines
616 B
JSON

{
"admin": "is_admin:True or role:admin or role:masterofuniverse",
"admin_or_owner": "rule:admin or project_id:%(project_id)s",
"default": "!",
"admin_api": "rule:admin",
"blazar:leases:get": "rule:admin_or_owner",
"blazar:leases:create": "rule:admin_or_owner",
"blazar:leases:delete": "rule:admin_or_owner",
"blazar:leases:update": "rule:admin_or_owner",
"blazar:plugins:get": "@",
"blazar:oshosts:get": "rule:admin_or_owner",
"blazar:oshosts:create": "rule:admin_api",
"blazar:oshosts:delete": "rule:admin_api",
"blazar:oshosts:update": "rule:admin_api"
}