openstack/neutron-dynamic-routing
Code Issues Proposed changes

Merge "Update policies"

Browse Source
This commit is contained in:
Jenkins 2012-10-28 10:36:05 +00:00 committed by Gerrit Code Review
commit a8bcbfe4bf
1 changed files with 34 additions and 34 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

68
etc/policy.json
View File

@ -1,42 +1,42 @@
{ {
"admin_or_owner": [["role:admin"], ["tenant_id:%(tenant_id)s"]], "admin_or_owner": "role:admin or tenant_id:%(tenant_id)s",
"admin_or_network_owner": [["role:admin"], ["tenant_id:%(network_tenant_id)s"]], "admin_or_network_owner": "role:admin or tenant_id:%(network_tenant_id)s",
"admin_only": [["role:admin"]], "admin_only": "role:admin",
"regular_user": [], "regular_user": "",
"shared": [["field:networks:shared=True"]], "shared": "field:networks:shared=True",
"external": [["field:networks:router:external=True"]], "external": "field:networks:router:external=True",
"default": [["rule:admin_or_owner"]], "default": "rule:admin_or_owner",
"extension:provider_network:view": [["rule:admin_only"]], "extension:provider_network:view": "rule:admin_only",
"extension:provider_network:set": [["rule:admin_only"]], "extension:provider_network:set": "rule:admin_only",
"extension:router:view": [["rule:regular_user"]], "extension:router:view": "rule:regular_user",
"extension:router:set": [["rule:admin_only"]], "extension:router:set": "rule:admin_only",
"extension:router:add_router_interface": [["rule:admin_or_owner"]], "extension:router:add_router_interface": "rule:admin_or_owner",
"extension:router:remove_router_interface": [["rule:admin_or_owner"]], "extension:router:remove_router_interface": "rule:admin_or_owner",
"subnets:private:read": [["rule:admin_or_owner"]], "subnets:private:read": "rule:admin_or_owner",
"subnets:private:write": [["rule:admin_or_owner"]], "subnets:private:write": "rule:admin_or_owner",
"subnets:shared:read": [["rule:regular_user"]], "subnets:shared:read": "rule:regular_user",
"subnets:shared:write": [["rule:admin_only"]], "subnets:shared:write": "rule:admin_only",
"create_subnet": [["rule:admin_or_network_owner"]], "create_subnet": "rule:admin_or_network_owner",
"get_subnet": [["rule:admin_or_owner"], ["rule:shared"]], "get_subnet": "rule:admin_or_owner or rule:shared",
"update_subnet": [["rule:admin_or_network_owner"]], "update_subnet": "rule:admin_or_network_owner",
"delete_subnet": [["rule:admin_or_network_owner"]], "delete_subnet": "rule:admin_or_network_owner",
"create_network": [], "create_network": "",
"get_network": [["rule:admin_or_owner"], ["rule:shared"], ["rule:external"]], "get_network": "rule:admin_or_owner or rule:shared or rule:external",
"create_network:shared": [["rule:admin_only"]], "create_network:shared": "rule:admin_only",
"create_network:router:external": [["rule:admin_only"]], "create_network:router:external": "rule:admin_only",
"update_network": [["rule:admin_or_owner"]], "update_network": "rule:admin_or_owner",
"delete_network": [["rule:admin_or_owner"]], "delete_network": "rule:admin_or_owner",
"create_port": [], "create_port": "",
"create_port:mac_address": [["rule:admin_or_network_owner"]], "create_port:mac_address": "rule:admin_or_network_owner",
"create_port:fixed_ips": [["rule:admin_or_network_owner"]], "create_port:fixed_ips": "rule:admin_or_network_owner",
"get_port": [["rule:admin_or_owner"]], "get_port": "rule:admin_or_owner",
"update_port": [["rule:admin_or_owner"]], "update_port": "rule:admin_or_owner",
"update_port:fixed_ips": [["rule:admin_or_network_owner"]], "update_port:fixed_ips": "rule:admin_or_network_owner",
"delete_port": [["rule:admin_or_owner"]] "delete_port": "rule:admin_or_owner"
} }