heat/heat/tests/policy/resources.json

{
    "context_is_admin":  "role:admin",

    "resource_types:OS::Test::AdminOnly": "rule:context_is_admin"

}