glance/etc/policy.json
Eoghan Glynn cc938e25f3 Use RBAC policy to determine if context is admin.
Fixes bug 1152716

If the context roles do not match the configured admin_role,
fall back to determining if admin via the "context_is_admin"
RBAC policy rule (for consistency with the approach used by
the other projects).

Note this requires that the "context_is_admin" rule *must*
be set in the policy.json if the out-of-the-box default rule
is used (as this default is so open, the net effect of omitting
the "context_is_admin" rule is for every request to acquire
admin status).

Change-Id: Ide2cf604b48f24bd759ce2d65091ff546cd9d22e
2013-05-02 16:40:24 +01:00

6 lines
101 B
JSON

{
"context_is_admin": "role:admin",
"default": "",
"manage_image_cache": "role:admin"
}