3521b8869f
- Easier update resource API; - Easier show resources API; - User context used by utility methods; - General cleanup - PRS rules on security groups verification framework; Closes-Bug: 1397721 Closes-Bug: 1403256 Closes-Bug: 1403258 Change-Id: Ife80c21ae61fe432130c7c5265c8b79a2b693563
42 lines
1.4 KiB
JSON
42 lines
1.4 KiB
JSON
{
|
|
"context_is_admin": "role:admin",
|
|
"admin_or_owner": "rule:context_is_admin or tenant_id:%(tenant_id)s",
|
|
"admin_only": "rule:context_is_admin",
|
|
"regular_user": "",
|
|
"default": "rule:admin_or_owner",
|
|
"gbp_shared": "field:policy_target_groups:shared=True",
|
|
|
|
"create_policy_target_group": "",
|
|
"get_policy_target_group": "rule:admin_or_owner or rule:gbp_shared",
|
|
|
|
"create_l2_policy": "",
|
|
"get_l2_policy": "rule:admin_or_owner or rule:gbp_shared",
|
|
|
|
"create_l3_policy": "",
|
|
"get_l3_policy": "rule:admin_or_owner or rule:gbp_shared",
|
|
|
|
"create_policy_classifier": "",
|
|
"get_policy_classifier": "rule:admin_or_owner or rule:gbp_shared",
|
|
|
|
"create_policy_action": "",
|
|
"get_policy_action": "rule:admin_or_owner or rule:gbp_shared",
|
|
|
|
"create_policy_rule": "",
|
|
"get_policy_rule": "rule:admin_or_owner or rule:gbp_shared",
|
|
|
|
"create_policy_rule_set": "",
|
|
"get_policy_rule_set": "rule:admin_or_owner or rule:gbp_shared",
|
|
|
|
"create_network_service_policy": "",
|
|
"get_network_service_policy": "rule:admin_or_owner or rule:gbp_shared",
|
|
|
|
"create_external_segment": "",
|
|
"get_external_segment": "rule:admin_or_owner or rule:gbp_shared",
|
|
|
|
"create_external_policy": "",
|
|
"get_external_policy": "rule:admin_or_owner or rule:gbp_shared",
|
|
|
|
"create_nat_pool": "",
|
|
"get_nat_pool": "rule:admin_or_owner or rule:gbp_shared"
|
|
}
|