ranger/orm/services/region_manager/rms/etc/policy.json

36 lines
1.1 KiB
JSON
Executable File

{
"default": "!",
"admin": "role:admin and tenant:admin or role:admin and tenant:service",
"admin_support": "role:admin_support and tenant:admin or role:admin_support and tenant:service",
"admin_viewer": "role:admin_viewer and tenant:admin or role:admin_viewer and tenant:service",
"admin_or_support": "rule:admin or rule:admin_support",
"admin_or_support_or_viewer": "rule:admin or rule:admin_support or rule:admin_viewer",
"lcp:get_one": "",
"lcp:get_all": "",
"region:get_one": "",
"region:get_all": "",
"region:create": "",
"region:update": "rule:admin",
"region:delete": "rule:admin",
"group:get_one": "",
"group:get_all": "",
"group:create": "",
"group:update": "rule:admin",
"group:delete": "rule:admin",
"configuration:get": "rule:admin_or_support_or_viewer",
"log:update": "rule:admin",
"metadata:get": "rule:admin_or_support_or_viewer",
"metadata:create": "rule:admin_or_support",
"metadata:update": "rule:admin",
"metadata:delete": "rule:admin",
"status:put": "rule:admin"
}