Merge "Policy in code for deployments"

etc/murano/policy.json

@@ -7,10 +7,6 @@
     "delete_category": "rule:admin_api",
     "add_category": "rule:admin_api",
 
-    "list_deployments": "rule:default",
-    "list_deployments_all_environments": "rule:default",
-    "statuses_deployments": "rule:default",
-
     "execute_action": "rule:default"
 }
 

murano/common/policies/__init__.py

@@ -15,6 +15,7 @@
 
 import itertools
 
+from murano.common.policies import deployment
 from murano.common.policies import env_template
 from murano.common.policies import environment
 from murano.common.policies import package
@@ -22,6 +23,7 @@ from murano.common.policies import package
 
 def list_rules():
     return itertools.chain(
+        deployment.list_rules(),
         environment.list_rules(),
         env_template.list_rules(),
         package.list_rules()

murano/common/policies/deployment.py

@@ -0,0 +1,44 @@
+# Copyright 2017 AT&T Corporation.
+# All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"); you may
+# not use this file except in compliance with the License. You may obtain
+# a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations
+# under the License.
+
+from oslo_policy import policy
+
+from murano.common.policies import base
+
+deployment_policies = [
+    policy.DocumentedRuleDefault(
+        name='list_deployments',
+        check_str=base.RULE_DEFAULT,
+        description='List deployments for an environment.',
+        operations=[{'path': '/v1/environments/{env_id}/deployments',
+                     'method': 'GET'}]),
+    policy.DocumentedRuleDefault(
+        name='list_deployments_all_environments',
+        check_str=base.RULE_DEFAULT,
+        description='List deployments for all environments in a project.',
+        operations=[{'path': '/v1/deployments',
+                     'method': 'GET'}]),
+    policy.DocumentedRuleDefault(
+        name='statuses_deployments',
+        check_str=base.RULE_DEFAULT,
+        description='Show deployment status details for a deployment.',
+        operations=[{
+            'path': '/v1/environments/{env_id}/deployments/{deployment_id}',
+            'method': 'GET'}])
+]
+
+
+def list_rules():
+    return deployment_policies