summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSean Pryor <spryor@redhat.com>2017-09-22 15:45:10 -0400
committerSean Pryor <spryor@redhat.com>2017-09-22 15:45:10 -0400
commit512c2df95e2f94d97604ff0726e0ea2820c30ba3 (patch)
tree426b398052455b4836228c89a6865bf06f9f3f80
parent57bd7a6bb70b3467020746b2dbeeeff132571ecd (diff)
downloadopenstack-access-policy-512c2df95e2f94d97604ff0726e0ea2820c30ba3.zip
openstack-access-policy-512c2df95e2f94d97604ff0726e0ea2820c30ba3.tar.gz
openstack-access-policy-512c2df95e2f94d97604ff0726e0ea2820c30ba3.tar.xz
Added cinder policy
Change-Id: Iadcf8d2b44f9509a7fd088de366a3cca32bf1e2b
-rw-r--r--etc/cinder/policy.json3
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/cinder/policy.json b/etc/cinder/policy.json
index ea2725a..4dc2030 100644
--- a/etc/cinder/policy.json
+++ b/etc/cinder/policy.json
@@ -1,7 +1,10 @@
{
"readonly": "(project_id:%(project_id)s and role:readonly)",
+ "domain_readonly": "(domain_id:%(domain_id)s and role:readonly)",
+ "global_readonly": "(role:readonly)",
"_member_role": "(role:member or role:_member_)",
"member": "(project_id:%(project_id)s and rule:_member_role)",
+ "domain_member": "(domain_id:%(domain_id)s and rule:_member_role)",
"admin": "(is_admin:True or role:admin)",
"owner": "(user_id:%(user_id)s and rule:_member_role)",