
This commit migrate all execution policies into code [1]. Like oslo.config, with oslo.policy, we can define all of default rules in code base and only change some rules via policy file. Another thing that we should use yaml format instead of json format. [1] https://governance.openstack.org/tc/goals/queens/policy-in-code.html Co-authored-By: Dai Dang-Van <daidv@vn.fujitsu.com> Closes-Bug: #1723333 Change-Id: I3e1d9f5b61d9f2511190fb810726aeb22912ad7b
37 lines
1.3 KiB
JSON
37 lines
1.3 KiB
JSON
{
|
|
"default": "rule:admin_or_owner",
|
|
|
|
"members:create": "rule:admin_or_owner",
|
|
"members:delete": "rule:admin_or_owner",
|
|
"members:get": "rule:admin_or_owner",
|
|
"members:list": "rule:admin_or_owner",
|
|
"members:update": "rule:admin_or_owner",
|
|
|
|
"services:list": "rule:admin_or_owner",
|
|
|
|
"tasks:get": "rule:admin_or_owner",
|
|
"tasks:list": "rule:admin_or_owner",
|
|
"tasks:update": "rule:admin_or_owner",
|
|
|
|
"workbooks:create": "rule:admin_or_owner",
|
|
"workbooks:delete": "rule:admin_or_owner",
|
|
"workbooks:get": "rule:admin_or_owner",
|
|
"workbooks:list": "rule:admin_or_owner",
|
|
"workbooks:update": "rule:admin_or_owner",
|
|
|
|
"workflows:create": "rule:admin_or_owner",
|
|
"workflows:delete": "rule:admin_or_owner",
|
|
"workflows:get": "rule:admin_or_owner",
|
|
"workflows:list": "rule:admin_or_owner",
|
|
"workflows:list:all_projects": "rule:admin_only",
|
|
"workflows:update": "rule:admin_or_owner",
|
|
|
|
"event_triggers:create": "rule:admin_or_owner",
|
|
"event_triggers:create:public": "rule:admin_only",
|
|
"event_triggers:delete": "rule:admin_or_owner",
|
|
"event_triggers:get": "rule:admin_or_owner",
|
|
"event_triggers:list": "rule:admin_or_owner",
|
|
"event_triggers:list:all_projects": "rule:admin_only",
|
|
"event_triggers:update": "rule:admin_or_owner"
|
|
}
|