designate/etc/moniker/policy.json

41 lines
1.3 KiB
JSON

{
"admin": "role:admin or is_admin:True",
"owner": "tenant_id:%(tenant_id)s or tenant_id:%(effective_tenant_id)s",
"admin_or_owner": "rule:admin or rule:owner",
"default": "rule:admin_or_owner",
"create_server": "rule:admin",
"get_servers": "rule:admin",
"get_server": "rule:admin",
"update_server": "rule:admin",
"delete_server": "rule:admin",
"create_tsigkey": "rule:admin",
"get_tsigkeys": "rule:admin",
"get_tsigkey": "rule:admin",
"update_tsigkey": "rule:admin",
"delete_tsigkey": "rule:admin",
"create_domain": "rule:admin_or_owner",
"get_domains": "rule:admin_or_owner",
"get_domain": "rule:admin_or_owner",
"update_domain": "rule:admin_or_owner",
"delete_domain": "rule:admin_or_owner",
"get_domain_servers": "rule:admin_or_owner",
"create_record": "rule:admin_or_owner",
"get_records": "rule:admin_or_owner",
"get_record": "rule:admin_or_owner",
"update_record": "rule:admin_or_owner",
"delete_record": "rule:admin_or_owner",
"use_sudo": "rule:admin",
"use_blacklisted_domain": "rule:admin",
"diagnostics_ping": "rule:admin",
"diagnostics_sync_domains": "rule:admin",
"diagnostics_sync_domain": "rule:admin",
"diagnostics_sync_record": "rule:admin"
}