ironic/ironic/tests/policy.json

{
    "admin_api": "is_admin:True",
    "admin_or_owner": "is_admin:True or project_id:%(project_id)s",
    "is_admin":  "role:admin or role:administrator",
    "default": "rule:admin_or_owner",
}