e8463a1ad4
This reverts commit 4a0f1a3ae54a69f37ab38a0209e3a9996f727693. Reason for revert: Neutron drivers team agreed to include neutron-fwaas again to Neutron stadium[1], and goverance change is proposed at [2]. [1] https://meetings.opendev.org/meetings/neutron_drivers/2022/neutron_drivers.2022-01-28-14.00.log.html#l-14 [2] https://review.opendev.org/c/openstack/governance/+/828078 Change-Id: I5018dfdf9ea866e113a17f9bd5a3b153e4f1c08f
37 lines
1.5 KiB
JSON
37 lines
1.5 KiB
JSON
{
|
|
"context_is_admin": "role:admin",
|
|
"owner": "tenant_id:%(tenant_id)s",
|
|
"admin_or_owner": "rule:context_is_admin or rule:owner",
|
|
"admin_only": "rule:context_is_admin",
|
|
"shared_firewalls": "field:firewalls:shared=True",
|
|
"shared_firewall_policies": "field:firewall_policies:shared=True",
|
|
"default": "rule:admin_or_owner",
|
|
|
|
"create_firewall": "",
|
|
"get_firewall": "rule:admin_or_owner",
|
|
"create_firewall:shared": "rule:admin_only",
|
|
"get_firewall:shared": "rule:admin_only",
|
|
"update_firewall": "rule:admin_or_owner",
|
|
"update_firewall:shared": "rule:admin_only",
|
|
"delete_firewall": "rule:admin_or_owner",
|
|
|
|
"create_firewall_policy": "",
|
|
"get_firewall_policy": "rule:admin_or_owner or rule:shared_firewall_policies",
|
|
"update_firewall_policy": "rule:admin_or_owner",
|
|
"delete_firewall_policy": "rule:admin_or_owner",
|
|
"create_firewall_policy:shared": "rule:admin_only",
|
|
"update_firewall_policy:shared": "rule:admin_only",
|
|
"delete_firewall_policy:shared": "rule:admin_only",
|
|
|
|
"insert_rule": "rule:admin_or_owner",
|
|
"remove_rule": "rule:admin_or_owner",
|
|
|
|
"create_firewall_rule": "",
|
|
"get_firewall_rule": "rule:admin_or_owner or rule:shared_firewalls",
|
|
"update_firewall_rule": "rule:admin_or_owner",
|
|
"delete_firewall_rule": "rule:admin_or_owner",
|
|
"create_firewall_rule:shared": "rule:admin_only",
|
|
"update_firewall_rule:shared": "rule:admin_only",
|
|
"delete_firewall_rule:shared": "rule:admin_only"
|
|
}
|