openstack-ansible-os_search.../templates/policy.json.j2

27 lines
1.2 KiB
Django/Jinja

{
"context_is_admin": "role:admin and is_admin_project:True",
"admin_or_owner": "rule:context_is_admin or project_id:%(project_id)s",
"default": "",
"search:query": "rule:admin_or_owner",
"search:query:aggregations": "rule:admin_or_owner",
"search:plugins_info": "rule:admin_or_owner",
"search:facets": "rule:admin_or_owner",
"resource:OS::Glance::Image": "rule:admin_or_owner",
"resource:OS::Glance::Metadef": "rule:admin_or_owner",
"resource:OS::Nova::Server": "rule:admin_or_owner",
"resource:OS::Nova::Hypervisor": "rule:context_is_admin",
"resource:OS::Nova::ServerGroup": "rule:admin_or_owner",
"resource:OS::Nova::Flavor": "rule:admin_or_owner",
"resource:OS::Cinder::Volume": "rule:admin_or_owner",
"resource:OS::Cinder::Snapshot": "rule:admin_or_owner",
"resource:OS::Designate::Zone": "rule:admin_or_owner",
"resource:OS::Designate::RecordSet": "rule:admin_or_owner",
"resource:OS::Neutron::Net": "rule:admin_or_owner",
"resource:OS::Neutron::Port": "rule:admin_or_owner",
"resource:OS::Neutron::Subnet": "rule:admin_or_owner",
"resource:OS::Neutron::Router": "rule:admin_or_owner",
"resource:OS::Neutron::SecurityGroup": "rule:admin_or_owner"
}