deb-ceilometer/etc/ceilometer/policy.json
Fabio Giannetti be42f2035a RBAC Support for Ceilometer API Implementation
This patch adds policy based Role Based Access Control
to the Ceilometer V2 APIs.

Validation/Enforcement of the policy is executed for the
different controllers and hence it is possible to
granularly control access.

Co-Authored-By: Fabio Giannetti <fabio.giannetti@hp.com>

Change-Id: I788b9b31c8cfba9f3caa19f1f6d465a3f81101ad
2014-12-12 09:03:56 -08:00

7 lines
201 B
JSON

{
"context_is_admin": "role:admin",
"context_is_project": "project_id:%(target.project_id)s",
"context_is_owner": "user_id:%(target.user_id)s",
"segregation": "rule:context_is_admin"
}