manila/etc/manila/policy.json

67 lines
2.8 KiB
JSON

{
"context_is_admin": [["role:admin"]],
"admin_or_owner": [["is_admin:True"], ["project_id:%(project_id)s"]],
"default": [["rule:admin_or_owner"]],
"admin_api": [["is_admin:True"]],
"share:create": [],
"share:delete": [["rule:default"]],
"share:get": [["rule:default"]],
"share:get_all": [["rule:default"]],
"share:list_by_share_server_id": [["rule:admin_api"]],
"share:update": [["rule:default"]],
"share:snapshot_update": [["rule:default"]],
"share:create_snapshot": [["rule:default"]],
"share:delete_snapshot": [["rule:default"]],
"share:get_snapshot": [["rule:default"]],
"share:get_all_snapshots": [["rule:default"]],
"share:access_get": [["rule:default"]],
"share:access_get_all": [["rule:default"]],
"share:allow_access": [["rule:default"]],
"share:deny_access": [["rule:default"]],
"share:get_share_metadata": [["rule:default"]],
"share:delete_share_metadata": [["rule:default"]],
"share:update_share_metadata": [["rule:default"]],
"share_extension:quotas:show": [],
"share_extension:quotas:update": [["rule:admin_api"]],
"share_extension:quotas:delete": [["rule:admin_api"]],
"share_extension:quota_classes": [],
"share_extension:share_admin_actions:force_delete": [["rule:admin_api"]],
"share_extension:share_admin_actions:reset_status": [["rule:admin_api"]],
"share_extension:snapshot_admin_actions:force_delete": [["rule:admin_api"]],
"share_extension:snapshot_admin_actions:reset_status": [["rule:admin_api"]],
"share_extension:services": [["rule:admin_api"]],
"share_extension:types_manage": [["rule:admin_api"]],
"share_extension:types_extra_specs": [["rule:admin_api"]],
"security_service:create": [["rule:default"]],
"security_service:delete": [["rule:default"]],
"security_service:update": [["rule:default"]],
"security_service:show": [["rule:default"]],
"security_service:index": [["rule:default"]],
"security_service:detail": [["rule:default"]],
"security_service:get_all_security_services": [["rule:admin_api"]],
"share_server:index": [["rule:admin_api"]],
"share_server:show": [["rule:admin_api"]],
"share_server:details": [["rule:admin_api"]],
"share_server:delete": [["rule:admin_api"]],
"share_network:create": [["rule:default"]],
"share_network:delete": [["rule:default"]],
"share_network:update": [["rule:default"]],
"share_network:index": [["rule:default"]],
"share_network:detail": [["rule:default"]],
"share_network:show": [["rule:default"]],
"share_network:add_security_service": [["rule:default"]],
"share_network:remove_security_service": [["rule:default"]],
"share_network:get_all_share_networks": [["rule:admin_api"]],
"scheduler_extension:scheduler_stats:get_pools" : "rule:admin_api"
}