openstack
/
tripleo-heat-templates
Code Issues Proposed changes

Merge "Update Barbican Secure-RBAC policy"

This commit is contained in:
Zuul 2022-02-21 07:06:11 +00:00 committed by Gerrit Code Review
parent ebff28c742 71ed741769
commit 882d0a52b2
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
environments/enable-secure-rbac.yaml
View File

@ -3061,14 +3061,14 @@ parameter_defaults:
barbican-consumer_get:
key: "consumer:get"
value: "rule:container_project_member and (rule:container_owner or rule:container_is_not_private_read) or rule:container_project_admin"
barbican-consumers_get:
key: "consumers:get"
barbican-container_consumers_get:
key: "container_consumers:get"
value: "rule:container_project_member and (rule:container_owner or rule:container_is_not_private_read) or rule:container_project_admin"
barbican-consumers_post:
key: "consumers:post"
barbican-container_consumers_post:
key: "container_consumers:post"
value: "rule:container_project_member and (rule:container_owner or rule:container_is_not_private_read) or rule:container_project_admin"
barbican-consumers_delete:
key: "consumers:delete"
barbican-container_consumers_delete:
key: "container_consumers:delete"
value: "rule:container_project_member and (rule:container_owner or rule:container_is_not_private_read) or rule:container_project_admin"
barbican-containers_post:
key: "containers:post"