openstack
/
horizon
Code Issues Proposed changes

Sync default policy rules 

This patch updates default policy-in-code rules in horizon based on
nova/neutron/glance RC deliverables. It doesn't update policy
rules for cinder and keystone as I have found no changes in their
policy rules.

Change-Id: Ifcf911d9bc649f61cc8522ccea60d30cf7f013be
This commit is contained in:
manchandavishal 2022-09-06 17:46:05 +05:30
parent 58f8329537
commit a8f2153b25
6 changed files with 2081 additions and 1517 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

53
openstack_dashboard/conf/default_policies/glance.yaml
View File

@ -26,7 +26,6 @@
- method: POST
path: /v2/images
scope_types:
- system
- project
- check_str: role:admin or (role:member and project_id:%(project_id)s)
deprecated_reason: null
@ -40,7 +39,6 @@
- method: DELETE
path: /v2/images/{image_id}
scope_types:
- system
- project
- check_str: role:admin or (role:reader and (project_id:%(project_id)s or project_id:%(member_id)s
or 'community':%(visibility)s or 'public':%(visibility)s or 'shared':%(visibility)s))
@ -55,7 +53,6 @@
- method: GET
path: /v2/images/{image_id}
scope_types:
- system
- project
- check_str: role:admin or (role:reader and project_id:%(project_id)s)
deprecated_reason: null
@ -69,7 +66,6 @@
- method: GET
path: /v2/images
scope_types:
- system
- project
- check_str: role:admin or (role:member and project_id:%(project_id)s)
deprecated_reason: null
@ -83,7 +79,6 @@
- method: PATCH
path: /v2/images/{image_id}
scope_types:
- system
- project
- check_str: role:admin
description: Publicize given image
@ -92,7 +87,6 @@
- method: PATCH
path: /v2/images/{image_id}
scope_types:
- system
- project
- check_str: role:admin or (role:member and project_id:%(project_id)s)
deprecated_reason: null
@ -106,7 +100,6 @@
- method: PATCH
path: /v2/images/{image_id}
scope_types:
- system
- project
- check_str: role:admin or (role:member and (project_id:%(project_id)s or project_id:%(member_id)s
or 'community':%(visibility)s or 'public':%(visibility)s or 'shared':%(visibility)s))
@ -121,7 +114,6 @@
- method: GET
path: /v2/images/{image_id}/file
scope_types:
- system
- project
- check_str: role:admin or (role:member and project_id:%(project_id)s)
deprecated_reason: null
@ -135,7 +127,6 @@
- method: PUT
path: /v2/images/{image_id}/file
scope_types:
- system
- project
- check_str: role:admin
deprecated_reason: null
@ -149,7 +140,6 @@
- method: PATCH
path: /v2/images/{image_id}
scope_types:
- system
- project
- check_str: role:admin or (role:reader and project_id:%(project_id)s)
deprecated_reason: null
@ -163,7 +153,6 @@
- method: GET
path: /v2/images/{image_id}
scope_types:
- system
- project
- check_str: role:admin or (role:member and project_id:%(project_id)s)
deprecated_reason: null
@ -177,7 +166,6 @@
- method: PATCH
path: /v2/images/{image_id}
scope_types:
- system
- project
- check_str: role:admin or (role:member and project_id:%(project_id)s)
deprecated_reason: null
@ -191,7 +179,6 @@
- method: POST
path: /v2/images/{image_id}/members
scope_types:
- system
- project
- check_str: role:admin or (role:member and project_id:%(project_id)s)
deprecated_reason: null
@ -205,7 +192,6 @@
- method: DELETE
path: /v2/images/{image_id}/members/{member_id}
scope_types:
- system
- project
- check_str: role:admin or role:reader and (project_id:%(project_id)s or project_id:%(member_id)s)
deprecated_reason: null
@ -219,7 +205,6 @@
- method: GET
path: /v2/images/{image_id}/members/{member_id}
scope_types:
- system
- project
- check_str: role:admin or role:reader and (project_id:%(project_id)s or project_id:%(member_id)s)
deprecated_reason: null
@ -233,7 +218,6 @@
- method: GET
path: /v2/images/{image_id}/members
scope_types:
- system
- project
- check_str: role:admin or (role:member and project_id:%(member_id)s)
deprecated_reason: null
@ -247,14 +231,12 @@
- method: PUT
path: /v2/images/{image_id}/members/{member_id}
scope_types:
- system
- project
- check_str: role:admin
description: Manage image cache
name: manage_image_cache
operations: []
scope_types:
- system
- project
- check_str: role:admin or (role:member and project_id:%(project_id)s)
deprecated_reason: null
@ -268,7 +250,6 @@
- method: POST
path: /v2/images/{image_id}/actions/deactivate
scope_types:
- system
- project
- check_str: role:admin or (role:member and project_id:%(project_id)s)
deprecated_reason: null
@ -282,7 +263,6 @@
- method: POST
path: /v2/images/{image_id}/actions/reactivate
scope_types:
- system
- project
- check_str: role:admin
description: Copy existing image to other stores
@ -291,7 +271,6 @@
- method: POST
path: /v2/images/{image_id}/import
scope_types:
- system
- project
- check_str: rule:default
deprecated_reason: null
@ -320,7 +299,6 @@
- method: GET
path: /v2/tasks/{task_id}
scope_types:
- system
- project
- check_str: rule:default
deprecated_reason: null
@ -349,7 +327,6 @@
- method: GET
path: /v2/tasks
scope_types:
- system
- project
- check_str: rule:default
deprecated_reason: null
@ -378,7 +355,6 @@
- method: POST
path: /v2/tasks
scope_types:
- system
- project
- check_str: rule:default
deprecated_for_removal: true
@ -396,7 +372,6 @@
- method: DELETE
path: /v2/tasks/{task_id}
scope_types:
- system
- project
- check_str: role:admin
description: '
@ -419,7 +394,6 @@
- method: DELETE
path: /v2/tasks/{task_id}
scope_types:
- system
- project
- check_str: ''
description: null
@ -443,7 +417,6 @@
- method: GET
path: /v2/metadefs/namespaces/{namespace_name}
scope_types:
- system
- project
- check_str: role:admin or (role:reader and project_id:%(project_id)s)
deprecated_reason: null
@ -457,7 +430,6 @@
- method: GET
path: /v2/metadefs/namespaces
scope_types:
- system
- project
- check_str: rule:metadef_admin
description: Modify an existing namespace.
@ -466,7 +438,6 @@
- method: PUT
path: /v2/metadefs/namespaces/{namespace_name}
scope_types:
- system
- project
- check_str: rule:metadef_admin
description: Create a namespace.
@ -475,7 +446,6 @@
- method: POST
path: /v2/metadefs/namespaces
scope_types:
- system
- project
- check_str: rule:metadef_admin
description: Delete a namespace.
@ -484,7 +454,6 @@
- method: DELETE
path: /v2/metadefs/namespaces/{namespace_name}
scope_types:
- system
- project
- check_str: role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))
deprecated_reason: null
@ -498,7 +467,6 @@
- method: GET
path: /v2/metadefs/namespaces/{namespace_name}/objects/{object_name}
scope_types:
- system
- project
- check_str: role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))
deprecated_reason: null
@ -512,7 +480,6 @@
- method: GET
path: /v2/metadefs/namespaces/{namespace_name}/objects
scope_types:
- system
- project
- check_str: rule:metadef_admin
description: Update an object within a namespace.
@ -521,7 +488,6 @@
- method: PUT
path: /v2/metadefs/namespaces/{namespace_name}/objects/{object_name}
scope_types:
- system
- project
- check_str: rule:metadef_admin
description: Create an object within a namespace.
@ -530,7 +496,6 @@
- method: POST
path: /v2/metadefs/namespaces/{namespace_name}/objects
scope_types:
- system
- project
- check_str: rule:metadef_admin
description: Delete an object within a namespace.
@ -539,7 +504,6 @@
- method: DELETE
path: /v2/metadefs/namespaces/{namespace_name}/objects/{object_name}
scope_types:
- system
- project
- check_str: role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))
deprecated_reason: null
@ -553,7 +517,6 @@
- method: GET
path: /v2/metadefs/resource_types
scope_types:
- system
- project
- check_str: role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))
deprecated_reason: null
@ -567,7 +530,6 @@
- method: GET
path: /v2/metadefs/namespaces/{namespace_name}/resource_types
scope_types:
- system
- project
- check_str: rule:metadef_admin
description: Create meta definition resource types association.
@ -576,7 +538,6 @@
- method: POST
path: /v2/metadefs/namespaces/{namespace_name}/resource_types
scope_types:
- system
- project
- check_str: rule:metadef_admin
description: Delete meta definition resource types association.
@ -585,7 +546,6 @@
- method: POST
path: /v2/metadefs/namespaces/{namespace_name}/resource_types/{name}
scope_types:
- system
- project
- check_str: role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))
deprecated_reason: null
@ -599,7 +559,6 @@
- method: GET
path: /v2/metadefs/namespaces/{namespace_name}/properties/{property_name}
scope_types:
- system
- project
- check_str: role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))
deprecated_reason: null
@ -613,7 +572,6 @@
- method: GET
path: /v2/metadefs/namespaces/{namespace_name}/properties
scope_types:
- system
- project
- check_str: rule:metadef_admin
description: Update meta definition property.
@ -622,7 +580,6 @@
- method: GET
path: /v2/metadefs/namespaces/{namespace_name}/properties/{property_name}
scope_types:
- system
- project
- check_str: rule:metadef_admin
description: Create meta definition property.
@ -631,7 +588,6 @@
- method: POST
path: /v2/metadefs/namespaces/{namespace_name}/properties
scope_types:
- system
- project
- check_str: rule:metadef_admin
description: Delete meta definition property.
@ -640,7 +596,6 @@
- method: DELETE
path: /v2/metadefs/namespaces/{namespace_name}/properties/{property_name}
scope_types:
- system
- project
- check_str: role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))
deprecated_reason: null
@ -654,7 +609,6 @@
- method: GET
path: /v2/metadefs/namespaces/{namespace_name}/tags/{tag_name}
scope_types:
- system
- project
- check_str: role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))
deprecated_reason: null
@ -668,7 +622,6 @@
- method: GET
path: /v2/metadefs/namespaces/{namespace_name}/tags
scope_types:
- system
- project
- check_str: rule:metadef_admin
description: Update tag definition.
@ -677,7 +630,6 @@
- method: PUT
path: /v2/metadefs/namespaces/{namespace_name}/tags/{tag_name}
scope_types:
- system
- project
- check_str: rule:metadef_admin
description: Add tag definition.
@ -686,7 +638,6 @@
- method: POST
path: /v2/metadefs/namespaces/{namespace_name}/tags/{tag_name}
scope_types:
- system
- project
- check_str: rule:metadef_admin
description: Create tag definitions.
@ -695,7 +646,6 @@
- method: POST
path: /v2/metadefs/namespaces/{namespace_name}/tags
scope_types:
- system
- project
- check_str: rule:metadef_admin
description: Delete tag definition.
@ -704,7 +654,6 @@
- method: DELETE
path: /v2/metadefs/namespaces/{namespace_name}/tags/{tag_name}
scope_types:
- system
- project
- check_str: rule:metadef_admin
description: Delete tag definitions.
@ -713,7 +662,6 @@
- method: DELETE
path: /v2/metadefs/namespaces/{namespace_name}/tags
scope_types:
- system
- project
- check_str: role:admin
deprecated_reason: null
@ -763,5 +711,4 @@
- method: GET
path: /v2/info/stores/detail
scope_types:
- system
- project

520
openstack_dashboard/conf/default_policies/neutron.yaml
View File

File diff suppressed because it is too large Load Diff

390
openstack_dashboard/conf/default_policies/nova.yaml
View File

File diff suppressed because it is too large Load Diff

106
openstack_dashboard/conf/glance_policy.yaml
View File

@ -17,7 +17,7 @@
# Create new image
# POST /v2/images
# Intended scope(s): system, project
# Intended scope(s): project
#"add_image": "role:admin or (role:member and project_id:%(project_id)s and project_id:%(owner)s)"
# DEPRECATED
@ -28,7 +28,7 @@
# Deletes the image
# DELETE /v2/images/{image_id}
# Intended scope(s): system, project
# Intended scope(s): project
#"delete_image": "role:admin or (role:member and project_id:%(project_id)s)"
# DEPRECATED
@ -39,7 +39,7 @@
# Get specified image
# GET /v2/images/{image_id}
# Intended scope(s): system, project
# Intended scope(s): project
#"get_image": "role:admin or (role:reader and (project_id:%(project_id)s or project_id:%(member_id)s or 'community':%(visibility)s or 'public':%(visibility)s or 'shared':%(visibility)s))"
# DEPRECATED
@ -52,7 +52,7 @@
# Get all available images
# GET /v2/images
# Intended scope(s): system, project
# Intended scope(s): project
#"get_images": "role:admin or (role:reader and project_id:%(project_id)s)"
# DEPRECATED
@ -63,7 +63,7 @@
# Updates given image
# PATCH /v2/images/{image_id}
# Intended scope(s): system, project
# Intended scope(s): project
#"modify_image": "role:admin or (role:member and project_id:%(project_id)s)"
# DEPRECATED
@ -74,12 +74,12 @@
# Publicize given image
# PATCH /v2/images/{image_id}
# Intended scope(s): system, project
# Intended scope(s): project
#"publicize_image": "role:admin"
# Communitize given image
# PATCH /v2/images/{image_id}
# Intended scope(s): system, project
# Intended scope(s): project
#"communitize_image": "role:admin or (role:member and project_id:%(project_id)s)"
# DEPRECATED
@ -90,7 +90,7 @@
# Downloads given image
# GET /v2/images/{image_id}/file
# Intended scope(s): system, project
# Intended scope(s): project
#"download_image": "role:admin or (role:member and (project_id:%(project_id)s or project_id:%(member_id)s or 'community':%(visibility)s or 'public':%(visibility)s or 'shared':%(visibility)s))"
# DEPRECATED
@ -103,7 +103,7 @@
# Uploads data to specified image
# PUT /v2/images/{image_id}/file
# Intended scope(s): system, project
# Intended scope(s): project
#"upload_image": "role:admin or (role:member and project_id:%(project_id)s)"
# DEPRECATED
@ -114,7 +114,7 @@
# Deletes the location of given image
# PATCH /v2/images/{image_id}
# Intended scope(s): system, project
# Intended scope(s): project
#"delete_image_location": "role:admin"
# DEPRECATED
@ -124,7 +124,7 @@
# Reads the location of the image
# GET /v2/images/{image_id}
# Intended scope(s): system, project
# Intended scope(s): project
#"get_image_location": "role:admin or (role:reader and project_id:%(project_id)s)"
# DEPRECATED
@ -135,7 +135,7 @@
# Sets location URI to given image
# PATCH /v2/images/{image_id}
# Intended scope(s): system, project
# Intended scope(s): project
#"set_image_location": "role:admin or (role:member and project_id:%(project_id)s)"
# DEPRECATED
@ -146,7 +146,7 @@
# Create image member
# POST /v2/images/{image_id}/members
# Intended scope(s): system, project
# Intended scope(s): project
#"add_member": "role:admin or (role:member and project_id:%(project_id)s)"
# DEPRECATED
@ -157,7 +157,7 @@
# Delete image member
# DELETE /v2/images/{image_id}/members/{member_id}
# Intended scope(s): system, project
# Intended scope(s): project
#"delete_member": "role:admin or (role:member and project_id:%(project_id)s)"
# DEPRECATED
@ -168,7 +168,7 @@
# Show image member details
# GET /v2/images/{image_id}/members/{member_id}
# Intended scope(s): system, project
# Intended scope(s): project
#"get_member": "role:admin or role:reader and (project_id:%(project_id)s or project_id:%(member_id)s)"
# DEPRECATED
@ -179,7 +179,7 @@
# List image members
# GET /v2/images/{image_id}/members
# Intended scope(s): system, project
# Intended scope(s): project
#"get_members": "role:admin or role:reader and (project_id:%(project_id)s or project_id:%(member_id)s)"
# DEPRECATED
@ -190,7 +190,7 @@
# Update image member
# PUT /v2/images/{image_id}/members/{member_id}
# Intended scope(s): system, project
# Intended scope(s): project
#"modify_member": "role:admin or (role:member and project_id:%(member_id)s)"
# DEPRECATED
@ -200,12 +200,12 @@
# The image API now supports roles.
# Manage image cache
# Intended scope(s): system, project
# Intended scope(s): project
#"manage_image_cache": "role:admin"
# Deactivate image
# POST /v2/images/{image_id}/actions/deactivate
# Intended scope(s): system, project
# Intended scope(s): project
#"deactivate": "role:admin or (role:member and project_id:%(project_id)s)"
# DEPRECATED
@ -216,7 +216,7 @@
# Reactivate image
# POST /v2/images/{image_id}/actions/reactivate
# Intended scope(s): system, project
# Intended scope(s): project
#"reactivate": "role:admin or (role:member and project_id:%(project_id)s)"
# DEPRECATED
@ -227,7 +227,7 @@
# Copy existing image to other stores
# POST /v2/images/{image_id}/import
# Intended scope(s): system, project
# Intended scope(s): project
#"copy_image": "role:admin"
# Get an image task.
@ -240,7 +240,7 @@
# external tasks API should be restricted as desired by the
# tasks_api_access policy. This may change in the future.
# GET /v2/tasks/{task_id}
# Intended scope(s): system, project
# Intended scope(s): project
#"get_task": "rule:default"
# DEPRECATED
@ -262,7 +262,7 @@
# external tasks API should be restricted as desired by the
# tasks_api_access policy. This may change in the future.
# GET /v2/tasks
# Intended scope(s): system, project
# Intended scope(s): project
#"get_tasks": "rule:default"
# DEPRECATED
@ -284,7 +284,7 @@
# external tasks API should be restricted as desired by the
# tasks_api_access policy. This may change in the future.
# POST /v2/tasks
# Intended scope(s): system, project
# Intended scope(s): project
#"add_task": "rule:default"
# DEPRECATED
@ -302,7 +302,7 @@
# removed in a future release.
# This policy is not used.
# DELETE /v2/tasks/{task_id}
# Intended scope(s): system, project
# Intended scope(s): project
#"modify_task": "rule:default"
# This is a generic blanket policy for protecting all task APIs. It is
@ -312,7 +312,7 @@
# GET /v2/tasks
# POST /v2/tasks
# DELETE /v2/tasks/{task_id}
# Intended scope(s): system, project
# Intended scope(s): project
#"tasks_api_access": "role:admin"
#"metadef_default": ""
@ -321,7 +321,7 @@
# Get a specific namespace.
# GET /v2/metadefs/namespaces/{namespace_name}
# Intended scope(s): system, project
# Intended scope(s): project
#"get_metadef_namespace": "role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))"
# DEPRECATED
@ -333,7 +333,7 @@
# List namespace.
# GET /v2/metadefs/namespaces
# Intended scope(s): system, project
# Intended scope(s): project
#"get_metadef_namespaces": "role:admin or (role:reader and project_id:%(project_id)s)"
# DEPRECATED
@ -344,22 +344,22 @@
# Modify an existing namespace.
# PUT /v2/metadefs/namespaces/{namespace_name}
# Intended scope(s): system, project
# Intended scope(s): project
#"modify_metadef_namespace": "rule:metadef_admin"
# Create a namespace.
# POST /v2/metadefs/namespaces
# Intended scope(s): system, project
# Intended scope(s): project
#"add_metadef_namespace": "rule:metadef_admin"
# Delete a namespace.
# DELETE /v2/metadefs/namespaces/{namespace_name}
# Intended scope(s): system, project
# Intended scope(s): project
#"delete_metadef_namespace": "rule:metadef_admin"
# Get a specific object from a namespace.
# GET /v2/metadefs/namespaces/{namespace_name}/objects/{object_name}
# Intended scope(s): system, project
# Intended scope(s): project
#"get_metadef_object": "role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))"
# DEPRECATED
@ -370,7 +370,7 @@
# Get objects from a namespace.
# GET /v2/metadefs/namespaces/{namespace_name}/objects
# Intended scope(s): system, project
# Intended scope(s): project
#"get_metadef_objects": "role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))"
# DEPRECATED
@ -382,22 +382,22 @@
# Update an object within a namespace.
# PUT /v2/metadefs/namespaces/{namespace_name}/objects/{object_name}
# Intended scope(s): system, project
# Intended scope(s): project
#"modify_metadef_object": "rule:metadef_admin"
# Create an object within a namespace.
# POST /v2/metadefs/namespaces/{namespace_name}/objects
# Intended scope(s): system, project
# Intended scope(s): project
#"add_metadef_object": "rule:metadef_admin"
# Delete an object within a namespace.
# DELETE /v2/metadefs/namespaces/{namespace_name}/objects/{object_name}
# Intended scope(s): system, project
# Intended scope(s): project
#"delete_metadef_object": "rule:metadef_admin"
# List meta definition resource types.
# GET /v2/metadefs/resource_types
# Intended scope(s): system, project
# Intended scope(s): project
#"list_metadef_resource_types": "role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))"
# DEPRECATED
@ -409,7 +409,7 @@
# Get meta definition resource types associations.
# GET /v2/metadefs/namespaces/{namespace_name}/resource_types
# Intended scope(s): system, project
# Intended scope(s): project
#"get_metadef_resource_type": "role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))"
# DEPRECATED
@ -421,17 +421,17 @@
# Create meta definition resource types association.
# POST /v2/metadefs/namespaces/{namespace_name}/resource_types
# Intended scope(s): system, project
# Intended scope(s): project
#"add_metadef_resource_type_association": "rule:metadef_admin"
# Delete meta definition resource types association.
# POST /v2/metadefs/namespaces/{namespace_name}/resource_types/{name}
# Intended scope(s): system, project
# Intended scope(s): project
#"remove_metadef_resource_type_association": "rule:metadef_admin"
# Get a specific meta definition property.
# GET /v2/metadefs/namespaces/{namespace_name}/properties/{property_name}
# Intended scope(s): system, project
# Intended scope(s): project
#"get_metadef_property": "role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))"
# DEPRECATED
@ -443,7 +443,7 @@
# List meta definition properties.
# GET /v2/metadefs/namespaces/{namespace_name}/properties
# Intended scope(s): system, project
# Intended scope(s): project
#"get_metadef_properties": "role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))"
# DEPRECATED
@ -455,22 +455,22 @@
# Update meta definition property.
# GET /v2/metadefs/namespaces/{namespace_name}/properties/{property_name}
# Intended scope(s): system, project
# Intended scope(s): project
#"modify_metadef_property": "rule:metadef_admin"
# Create meta definition property.
# POST /v2/metadefs/namespaces/{namespace_name}/properties
# Intended scope(s): system, project
# Intended scope(s): project
#"add_metadef_property": "rule:metadef_admin"
# Delete meta definition property.
# DELETE /v2/metadefs/namespaces/{namespace_name}/properties/{property_name}
# Intended scope(s): system, project
# Intended scope(s): project
#"remove_metadef_property": "rule:metadef_admin"
# Get tag definition.
# GET /v2/metadefs/namespaces/{namespace_name}/tags/{tag_name}
# Intended scope(s): system, project
# Intended scope(s): project
#"get_metadef_tag": "role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))"
# DEPRECATED
@ -481,7 +481,7 @@
# List tag definitions.
# GET /v2/metadefs/namespaces/{namespace_name}/tags
# Intended scope(s): system, project
# Intended scope(s): project
#"get_metadef_tags": "role:admin or (role:reader and (project_id:%(project_id)s or 'public':%(visibility)s))"
# DEPRECATED
@ -492,27 +492,27 @@
# Update tag definition.
# PUT /v2/metadefs/namespaces/{namespace_name}/tags/{tag_name}
# Intended scope(s): system, project
# Intended scope(s): project
#"modify_metadef_tag": "rule:metadef_admin"
# Add tag definition.
# POST /v2/metadefs/namespaces/{namespace_name}/tags/{tag_name}
# Intended scope(s): system, project
# Intended scope(s): project
#"add_metadef_tag": "rule:metadef_admin"
# Create tag definitions.
# POST /v2/metadefs/namespaces/{namespace_name}/tags
# Intended scope(s): system, project
# Intended scope(s): project
#"add_metadef_tags": "rule:metadef_admin"
# Delete tag definition.
# DELETE /v2/metadefs/namespaces/{namespace_name}/tags/{tag_name}
# Intended scope(s): system, project
# Intended scope(s): project
#"delete_metadef_tag": "rule:metadef_admin"
# Delete tag definitions.
# DELETE /v2/metadefs/namespaces/{namespace_name}/tags
# Intended scope(s): system, project
# Intended scope(s): project
#"delete_metadef_tags": "rule:metadef_admin"
# Queue image for caching
@ -548,6 +548,6 @@
# Expose store specific information
# GET /v2/info/stores/detail
# Intended scope(s): system, project
# Intended scope(s): project
#"stores_info_detail": "role:admin"

1273
openstack_dashboard/conf/neutron_policy.yaml
View File

File diff suppressed because it is too large Load Diff

1256
openstack_dashboard/conf/nova_policy.yaml
View File

File diff suppressed because it is too large Load Diff