openstack
/
openstack-ansible-os_magnum
Code Issues Proposed changes

Updating policy.json.j2 to match upstream 

Updating policy.json.j2 to match the upstream policy.json.

Change-Id: I145819a0f1a7cbdae02bdd3f6045ae287e69bbc4
This commit is contained in:
Chris Hultin 2016-06-15 12:39:46 -05:00
parent 76fbb21a6b
commit 8b282810b6
1 changed files with 6 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
templates/policy.json.j2
View File

@ -3,6 +3,7 @@
"admin_or_owner": "is_admin:True or project_id:%(project_id)s",
"default": "rule:admin_or_owner",
"admin_api": "rule:context_is_admin",
"admin_or_user": "is_admin:True or user_id:%(user_id)s",
"bay:create": "rule:default",
"bay:delete": "rule:default",
@ -19,20 +20,6 @@
"baymodel:update": "rule:default",
"baymodel:publish": "rule:admin_or_owner",
"node:create": "rule:default",
"node:delete": "rule:default",
"node:detail": "rule:default",
"node:get": "rule:default",
"node:get_all": "rule:default",
"node:update": "rule:default",
"pod:create": "rule:default",
"pod:delete": "rule:default",
"pod:detail": "rule:default",
"pod:get": "rule:default",
"pod:get_all": "rule:default",
"pod:update": "rule:default",
"rc:create": "rule:default",
"rc:delete": "rule:default",
"rc:detail": "rule:default",
@ -40,22 +27,15 @@
"rc:get_all": "rule:default",
"rc:update": "rule:default",
"service:create": "rule:default",
"service:delete": "rule:default",
"service:detail": "rule:default",
"service:get": "rule:default",
"service:get_all": "rule:default",
"service:update": "rule:default",
"container:create": "rule:default",
"container:delete": "rule:default",
"container:create": "rule:admin_or_user",
"container:delete": "rule:admin_or_user",
"container:detail": "rule:default",
"container:get": "rule:default",
"container:get_all": "rule:default",
"container:update": "rule:default",
"container:update": "rule:admin_or_user",
"certificate:create": "rule:default",
"certificate:get": "rule:default",
"certificate:create": "rule:admin_or_user",
"certificate:get": "rule:admin_or_user",
"magnum-service:get_all": "rule:admin_api"
}