
This commit migrate all action execution policies into code [1]. Like oslo.config, with oslo.policy, we can define all of default rules in code base and only change some rules via policy file. Another thing that we should use yaml format instead of json format. [1] https://governance.openstack.org/tc/goals/queens/policy-in-code.html Co-authored-By: Dai Dang-Van <daidv@vn.fujitsu.com> Change-Id: Ic4b597995ae2ab49e793871c14060f0b9662f468
61 lines
2.2 KiB
JSON
61 lines
2.2 KiB
JSON
{
|
|
"default": "rule:admin_or_owner",
|
|
|
|
"actions:create": "rule:admin_or_owner",
|
|
"actions:delete": "rule:admin_or_owner",
|
|
"actions:get": "rule:admin_or_owner",
|
|
"actions:list": "rule:admin_or_owner",
|
|
"actions:update": "rule:admin_or_owner",
|
|
|
|
"cron_triggers:create": "rule:admin_or_owner",
|
|
"cron_triggers:delete": "rule:admin_or_owner",
|
|
"cron_triggers:get": "rule:admin_or_owner",
|
|
"cron_triggers:list": "rule:admin_or_owner",
|
|
"cron_triggers:list:all_projects": "rule:admin_only",
|
|
|
|
"environments:create": "rule:admin_or_owner",
|
|
"environments:delete": "rule:admin_or_owner",
|
|
"environments:get": "rule:admin_or_owner",
|
|
"environments:list": "rule:admin_or_owner",
|
|
"environments:update": "rule:admin_or_owner",
|
|
|
|
"executions:create": "rule:admin_or_owner",
|
|
"executions:delete": "rule:admin_or_owner",
|
|
"executions:get": "rule:admin_or_owner",
|
|
"executions:list": "rule:admin_or_owner",
|
|
"executions:update": "rule:admin_or_owner",
|
|
|
|
"members:create": "rule:admin_or_owner",
|
|
"members:delete": "rule:admin_or_owner",
|
|
"members:get": "rule:admin_or_owner",
|
|
"members:list": "rule:admin_or_owner",
|
|
"members:update": "rule:admin_or_owner",
|
|
|
|
"services:list": "rule:admin_or_owner",
|
|
|
|
"tasks:get": "rule:admin_or_owner",
|
|
"tasks:list": "rule:admin_or_owner",
|
|
"tasks:update": "rule:admin_or_owner",
|
|
|
|
"workbooks:create": "rule:admin_or_owner",
|
|
"workbooks:delete": "rule:admin_or_owner",
|
|
"workbooks:get": "rule:admin_or_owner",
|
|
"workbooks:list": "rule:admin_or_owner",
|
|
"workbooks:update": "rule:admin_or_owner",
|
|
|
|
"workflows:create": "rule:admin_or_owner",
|
|
"workflows:delete": "rule:admin_or_owner",
|
|
"workflows:get": "rule:admin_or_owner",
|
|
"workflows:list": "rule:admin_or_owner",
|
|
"workflows:list:all_projects": "rule:admin_only",
|
|
"workflows:update": "rule:admin_or_owner",
|
|
|
|
"event_triggers:create": "rule:admin_or_owner",
|
|
"event_triggers:create:public": "rule:admin_only",
|
|
"event_triggers:delete": "rule:admin_or_owner",
|
|
"event_triggers:get": "rule:admin_or_owner",
|
|
"event_triggers:list": "rule:admin_or_owner",
|
|
"event_triggers:list:all_projects": "rule:admin_only",
|
|
"event_triggers:update": "rule:admin_or_owner"
|
|
}
|