
This commit migrate all member policies into code [1]. Like oslo.config, with oslo.policy, we can define all of default rules in code base and only change some rules via policy file. Another thing that we should use yaml format instead of json format. [1] https://governance.openstack.org/tc/goals/queens/policy-in-code.html Co-authored-By: Dai Dang-Van <daidv@vn.fujitsu.com> Change-Id: I166d0d62489fa8230a2ba34ef09f9366ac321633
31 lines
1.1 KiB
JSON
31 lines
1.1 KiB
JSON
{
|
|
"default": "rule:admin_or_owner",
|
|
|
|
"services:list": "rule:admin_or_owner",
|
|
|
|
"tasks:get": "rule:admin_or_owner",
|
|
"tasks:list": "rule:admin_or_owner",
|
|
"tasks:update": "rule:admin_or_owner",
|
|
|
|
"workbooks:create": "rule:admin_or_owner",
|
|
"workbooks:delete": "rule:admin_or_owner",
|
|
"workbooks:get": "rule:admin_or_owner",
|
|
"workbooks:list": "rule:admin_or_owner",
|
|
"workbooks:update": "rule:admin_or_owner",
|
|
|
|
"workflows:create": "rule:admin_or_owner",
|
|
"workflows:delete": "rule:admin_or_owner",
|
|
"workflows:get": "rule:admin_or_owner",
|
|
"workflows:list": "rule:admin_or_owner",
|
|
"workflows:list:all_projects": "rule:admin_only",
|
|
"workflows:update": "rule:admin_or_owner",
|
|
|
|
"event_triggers:create": "rule:admin_or_owner",
|
|
"event_triggers:create:public": "rule:admin_only",
|
|
"event_triggers:delete": "rule:admin_or_owner",
|
|
"event_triggers:get": "rule:admin_or_owner",
|
|
"event_triggers:list": "rule:admin_or_owner",
|
|
"event_triggers:list:all_projects": "rule:admin_only",
|
|
"event_triggers:update": "rule:admin_or_owner"
|
|
}
|