openstack-manuals/doc/src/docbkx/openstack-network-connectivity-admin/samples/policy.json

{
   "admin_or_owner":[
      [
         "role:admin"
      ],
      [
         "tenant_id:%(tenant_id)s"
      ]
   ],
   "admin_or_network_owner":[
      [
         "role:admin"
      ],
      [
         "tenant_id:%(network_tenant_id)s"
      ]
   ],
   "admin_only":[
      [
         "role:admin"
      ]
   ],
   "regular_user":[

   ],
   "shared":[
      [
         "field:networks:shared=True"
      ]
   ],
   "default":[
      [
         "rule:admin_or_owner"
      ]
   ],
   "create_subnet":[
      [
         "rule:admin_or_network_owner"
      ]
   ],
   "get_subnet":[
      [
         "rule:admin_or_owner"
      ],
      [
         "rule:shared"
      ]
   ],
   "update_subnet":[
      [
         "rule:admin_or_network_owner"
      ]
   ],
   "delete_subnet":[
      [
         "rule:admin_or_network_owner"
      ]
   ],
   "create_network":[

   ],
   "get_network":[
      [
         "rule:admin_or_owner"
      ],
      [
         "rule:shared"
      ]
   ],
   "create_network:shared":[
      [
         "rule:admin_only"
      ]
   ],
   "update_network":[
      [
         "rule:admin_or_owner"
      ]
   ],
   "delete_network":[
      [
         "rule:admin_or_owner"
      ]
   ],
   "create_port":[

   ],
   "create_port:mac_address":[
      [
         "rule:admin_or_network_owner"
      ]
   ],
   "create_port:fixed_ips":[
      [
         "rule:admin_or_network_owner"
      ]
   ],
   "get_port":[
      [
         "rule:admin_or_owner"
      ]
   ],
   "update_port":[
      [
         "rule:admin_or_owner"
      ]
   ],
   "delete_port":[
      [
         "rule:admin_or_owner"
      ]
   ]
}