diff options
Diffstat (limited to 'etc_osp10_original/gnocchi/policy.json')
-rw-r--r-- | etc_osp10_original/gnocchi/policy.json | 42 |
1 files changed, 42 insertions, 0 deletions
diff --git a/etc_osp10_original/gnocchi/policy.json b/etc_osp10_original/gnocchi/policy.json new file mode 100644 index 0000000..00aaedd --- /dev/null +++ b/etc_osp10_original/gnocchi/policy.json @@ -0,0 +1,42 @@ +{ + "admin_or_creator": "role:admin or project_id:%(created_by_project_id)s", + "resource_owner": "project_id:%(project_id)s", + "metric_owner": "project_id:%(resource.project_id)s", + + "get status": "role:admin", + + "create resource": "", + "get resource": "rule:admin_or_creator or rule:resource_owner", + "update resource": "rule:admin_or_creator", + "delete resource": "rule:admin_or_creator", + "delete resources": "rule:admin_or_creator", + "list resource": "rule:admin_or_creator or rule:resource_owner", + "search resource": "rule:admin_or_creator or rule:resource_owner", + + "create resource type": "role:admin", + "delete resource type": "role:admin", + "update resource type": "role:admin", + "list resource type": "", + "get resource type": "", + + "get archive policy": "", + "list archive policy": "", + "create archive policy": "role:admin", + "update archive policy": "role:admin", + "delete archive policy": "role:admin", + + "create archive policy rule": "role:admin", + "get archive policy rule": "", + "list archive policy rule": "", + "delete archive policy rule": "role:admin", + + "create metric": "", + "delete metric": "rule:admin_or_creator", + "get metric": "rule:admin_or_creator or rule:metric_owner", + "search metric": "rule:admin_or_creator or rule:metric_owner", + "list metric": "", + "list all metric": "role:admin", + + "get measures": "rule:admin_or_creator or rule:metric_owner", + "post measures": "rule:admin_or_creator" +} |