Surojit Pathak
deae4e44b0
Magnum API's magnum_service:get_all is enforced by admin_api. Modifying the rule to use context_is_admin. Also changing the to_dict() call to include change in roles. Change-Id: I44dda27857945dfd3ad43fa28ea458ce2966388c Closes-Bug: #1503402
62 lines
1.8 KiB
JSON
62 lines
1.8 KiB
JSON
{
|
|
"context_is_admin": "role:admin",
|
|
"admin_or_owner": "is_admin:True or project_id:%(project_id)s",
|
|
"default": "rule:admin_or_owner",
|
|
"admin_api": "rule:context_is_admin",
|
|
|
|
"bay:create": "rule:default",
|
|
"bay:delete": "rule:default",
|
|
"bay:detail": "rule:default",
|
|
"bay:get": "rule:default",
|
|
"bay:get_all": "rule:default",
|
|
"bay:update": "rule:default",
|
|
|
|
"baymodel:create": "rule:default",
|
|
"baymodel:delete": "rule:default",
|
|
"baymodel:detail": "rule:default",
|
|
"baymodel:get": "rule:default",
|
|
"baymodel:get_all": "rule:default",
|
|
"baymodel:update": "rule:default",
|
|
"baymodel:publish": "rule:admin_or_owner",
|
|
|
|
"node:create": "rule:default",
|
|
"node:delete": "rule:default",
|
|
"node:detail": "rule:default",
|
|
"node:get": "rule:default",
|
|
"node:get_all": "rule:default",
|
|
"node:update": "rule:default",
|
|
|
|
"pod:create": "rule:default",
|
|
"pod:delete": "rule:default",
|
|
"pod:detail": "rule:default",
|
|
"pod:get": "rule:default",
|
|
"pod:get_all": "rule:default",
|
|
"pod:update": "rule:default",
|
|
|
|
"rc:create": "rule:default",
|
|
"rc:delete": "rule:default",
|
|
"rc:detail": "rule:default",
|
|
"rc:get": "rule:default",
|
|
"rc:get_all": "rule:default",
|
|
"rc:update": "rule:default",
|
|
|
|
"service:create": "rule:default",
|
|
"service:delete": "rule:default",
|
|
"service:detail": "rule:default",
|
|
"service:get": "rule:default",
|
|
"service:get_all": "rule:default",
|
|
"service:update": "rule:default",
|
|
|
|
"container:create": "rule:default",
|
|
"container:delete": "rule:default",
|
|
"container:detail": "rule:default",
|
|
"container:get": "rule:default",
|
|
"container:get_all": "rule:default",
|
|
"container:update": "rule:default",
|
|
|
|
"certificate:create": "rule:default",
|
|
"certificate:get": "rule:default",
|
|
|
|
"magnum-service:get_all": "rule:admin_api"
|
|
}
|