qinling/etc/policy.json.sample
Lingxian Kong 2778c1cc3b Support admin user get functions of other projects
Partially implements: blueprint qinling-admin-operations
Change-Id: I7192c0006fd82e62f751323cc9707479040f5764
2017-12-12 22:32:52 +13:00

13 lines
403 B
Plaintext

{
"context_is_admin": "role:admin or is_admin:1",
"owner" : "project_id:%(project_id)s",
"admin_or_owner": "rule:context_is_admin or rule:owner",
"default": "rule:admin_or_owner",
"runtime:create": "rule:context_is_admin",
"runtime:update": "rule:context_is_admin",
"runtime:delete": "rule:context_is_admin",
"function:get_all:all_projects": "rule:context_is_admin",
}