2016-05-23 18:07:59 -03:00
|
|
|
.. -*- rst -*-
|
|
|
|
|
2016-07-04 14:35:49 -07:00
|
|
|
==========
|
|
|
|
Policies
|
|
|
|
==========
|
2016-05-23 18:07:59 -03:00
|
|
|
|
|
|
|
A policy is an arbitrarily serialized policy engine rule set to be
|
|
|
|
consumed by a remote service.
|
|
|
|
|
|
|
|
You encode policy rule sets into a blob that remote services can
|
|
|
|
consume. To do so, set ``type`` to ``application/json`` and specify
|
|
|
|
policy rules as JSON strings in a ``blob``. For example:
|
|
|
|
|
|
|
|
::
|
|
|
|
|
|
|
|
{
|
|
|
|
"blob":{
|
|
|
|
"foobar_user":[
|
|
|
|
"role:compute-user"
|
|
|
|
]
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
Create policy
|
|
|
|
=============
|
|
|
|
|
|
|
|
.. rest_method:: POST /v3/policies
|
|
|
|
|
2017-01-30 13:53:09 -08:00
|
|
|
Relationship: ``https://docs.openstack.org/api/openstack-identity/3/rel/policies``
|
2016-08-11 14:37:21 -05:00
|
|
|
|
2016-05-23 18:07:59 -03:00
|
|
|
Creates a policy.
|
|
|
|
|
2016-07-13 17:42:27 +00:00
|
|
|
Normal response codes: 201
|
2016-08-25 13:14:34 +07:00
|
|
|
|
2016-07-13 17:42:27 +00:00
|
|
|
Error response codes: 413,415,405,404,403,401,400,503,409
|
2016-05-23 18:07:59 -03:00
|
|
|
|
|
|
|
Request
|
|
|
|
-------
|
|
|
|
|
|
|
|
.. rest_parameters:: parameters.yaml
|
|
|
|
|
|
|
|
- policy: policy
|
2016-08-05 17:24:26 +07:00
|
|
|
- type: policy_type
|
|
|
|
- blob: policy_blob_str
|
2016-05-23 18:07:59 -03:00
|
|
|
|
|
|
|
Request Example
|
|
|
|
---------------
|
|
|
|
|
|
|
|
.. literalinclude:: ./samples/admin/policy-create-request.json
|
|
|
|
:language: javascript
|
|
|
|
|
|
|
|
Response Parameters
|
|
|
|
-------------------
|
|
|
|
|
|
|
|
.. rest_parameters:: parameters.yaml
|
|
|
|
|
2016-08-05 17:24:26 +07:00
|
|
|
- links: policy_links
|
|
|
|
- blob: policy_blob_str
|
2016-05-23 18:07:59 -03:00
|
|
|
- policy: policy
|
2016-08-05 17:24:26 +07:00
|
|
|
- type: policy_type
|
|
|
|
- id: policy_id
|
2016-05-23 18:07:59 -03:00
|
|
|
|
|
|
|
|
|
|
|
List policies
|
|
|
|
=============
|
|
|
|
|
|
|
|
.. rest_method:: GET /v3/policies
|
|
|
|
|
2017-01-30 13:53:09 -08:00
|
|
|
Relationship: ``https://docs.openstack.org/api/openstack-identity/3/rel/policies``
|
2016-08-11 14:37:21 -05:00
|
|
|
|
2016-05-23 18:07:59 -03:00
|
|
|
Lists policies.
|
|
|
|
|
|
|
|
Normal response codes: 200
|
2016-08-25 13:14:34 +07:00
|
|
|
|
2016-07-13 17:42:27 +00:00
|
|
|
Error response codes: 413,405,404,403,401,400,503
|
2016-05-23 18:07:59 -03:00
|
|
|
|
|
|
|
Request
|
|
|
|
-------
|
|
|
|
|
|
|
|
.. rest_parameters:: parameters.yaml
|
|
|
|
|
2016-08-05 17:24:26 +07:00
|
|
|
- type: policy_type_query
|
2016-05-23 18:07:59 -03:00
|
|
|
|
|
|
|
Response Parameters
|
|
|
|
-------------------
|
|
|
|
|
|
|
|
.. rest_parameters:: parameters.yaml
|
|
|
|
|
2016-08-05 17:24:26 +07:00
|
|
|
- links: policy_links
|
|
|
|
- blob: policy_blob_obj
|
2016-05-23 18:07:59 -03:00
|
|
|
- policies: policies
|
2016-08-05 17:24:26 +07:00
|
|
|
- type: policy_type
|
|
|
|
- id: policy_id
|
2016-05-23 18:07:59 -03:00
|
|
|
|
|
|
|
Response Example
|
|
|
|
----------------
|
|
|
|
|
|
|
|
.. literalinclude:: ./samples/admin/policies-list-response.json
|
|
|
|
:language: javascript
|
|
|
|
|
|
|
|
|
|
|
|
Show policy details
|
|
|
|
===================
|
|
|
|
|
|
|
|
.. rest_method:: GET /v3/policies/{policy_id}
|
|
|
|
|
2017-01-30 13:53:09 -08:00
|
|
|
Relationship: ``https://docs.openstack.org/api/openstack-identity/3/rel/policy``
|
2016-08-11 14:37:21 -05:00
|
|
|
|
2016-05-23 18:07:59 -03:00
|
|
|
Shows details for a policy.
|
|
|
|
|
|
|
|
Normal response codes: 200
|
2016-08-25 13:14:34 +07:00
|
|
|
|
2016-07-13 17:42:27 +00:00
|
|
|
Error response codes: 413,405,404,403,401,400,503
|
2016-05-23 18:07:59 -03:00
|
|
|
|
|
|
|
Request
|
|
|
|
-------
|
|
|
|
|
|
|
|
.. rest_parameters:: parameters.yaml
|
|
|
|
|
2016-08-05 17:24:26 +07:00
|
|
|
- policy_id: policy_id_path
|
2016-05-23 18:07:59 -03:00
|
|
|
|
|
|
|
Response Parameters
|
|
|
|
-------------------
|
|
|
|
|
|
|
|
.. rest_parameters:: parameters.yaml
|
|
|
|
|
2016-08-05 17:24:26 +07:00
|
|
|
- links: policy_links
|
|
|
|
- blob: policy_blob_obj
|
2016-05-23 18:07:59 -03:00
|
|
|
- policy: policy
|
2016-08-05 17:24:26 +07:00
|
|
|
- type: policy_type
|
|
|
|
- id: policy_id
|
2016-05-23 18:07:59 -03:00
|
|
|
|
|
|
|
Response Example
|
|
|
|
----------------
|
|
|
|
|
|
|
|
.. literalinclude:: ./samples/admin/policy-show-response.json
|
|
|
|
:language: javascript
|
|
|
|
|
|
|
|
|
|
|
|
Update policy
|
|
|
|
=============
|
|
|
|
|
|
|
|
.. rest_method:: PATCH /v3/policies/{policy_id}
|
|
|
|
|
2017-01-30 13:53:09 -08:00
|
|
|
Relationship: ``https://docs.openstack.org/api/openstack-identity/3/rel/policy``
|
2016-08-11 14:37:21 -05:00
|
|
|
|
2016-05-23 18:07:59 -03:00
|
|
|
Updates a policy.
|
|
|
|
|
|
|
|
Normal response codes: 200
|
2016-08-25 13:14:34 +07:00
|
|
|
|
2016-07-13 17:42:27 +00:00
|
|
|
Error response codes: 413,415,405,404,403,401,400,503,409
|
2016-05-23 18:07:59 -03:00
|
|
|
|
|
|
|
Request
|
|
|
|
-------
|
|
|
|
|
|
|
|
.. rest_parameters:: parameters.yaml
|
|
|
|
|
2016-08-05 17:24:26 +07:00
|
|
|
- policy_id: policy_id_path
|
2016-05-23 18:07:59 -03:00
|
|
|
- policy: policy
|
2016-08-05 17:24:26 +07:00
|
|
|
- type: policy_type
|
|
|
|
- blob: policy_blob_obj
|
2016-05-23 18:07:59 -03:00
|
|
|
|
|
|
|
Request Example
|
|
|
|
---------------
|
|
|
|
|
|
|
|
.. literalinclude:: ./samples/admin/policy-update-request.json
|
|
|
|
:language: javascript
|
|
|
|
|
|
|
|
Response Parameters
|
|
|
|
-------------------
|
|
|
|
|
|
|
|
.. rest_parameters:: parameters.yaml
|
|
|
|
|
2016-08-05 17:24:26 +07:00
|
|
|
- links: policy_links
|
|
|
|
- blob: policy_blob_obj
|
2016-05-23 18:07:59 -03:00
|
|
|
- policy: policy
|
2016-08-05 17:24:26 +07:00
|
|
|
- type: policy_type
|
|
|
|
- id: policy_id
|
2016-05-23 18:07:59 -03:00
|
|
|
|
|
|
|
Response Example
|
|
|
|
----------------
|
|
|
|
|
|
|
|
.. literalinclude:: ./samples/admin/policy-update-response.json
|
|
|
|
:language: javascript
|
|
|
|
|
|
|
|
|
|
|
|
Delete policy
|
|
|
|
=============
|
|
|
|
|
|
|
|
.. rest_method:: DELETE /v3/policies/{policy_id}
|
|
|
|
|
2017-01-30 13:53:09 -08:00
|
|
|
Relationship: ``https://docs.openstack.org/api/openstack-identity/3/rel/policy``
|
2016-08-11 14:37:21 -05:00
|
|
|
|
2016-05-23 18:07:59 -03:00
|
|
|
Deletes a policy.
|
|
|
|
|
2016-07-13 17:42:27 +00:00
|
|
|
Normal response codes: 204
|
2016-08-25 13:14:34 +07:00
|
|
|
|
2016-07-13 17:42:27 +00:00
|
|
|
Error response codes: 413,415,405,404,403,401,400,503,409
|
2016-05-23 18:07:59 -03:00
|
|
|
|
|
|
|
Request
|
|
|
|
-------
|
|
|
|
|
|
|
|
.. rest_parameters:: parameters.yaml
|
|
|
|
|
2016-08-05 17:24:26 +07:00
|
|
|
- policy_id: policy_id_path
|