From ab91ff350034a186fe7f1400c2ffece96efaeacf Mon Sep 17 00:00:00 2001
From: Sean Pryor <spryor@redhat.com>
Date: Mon, 5 Jun 2017 15:35:25 -0400
Subject: Created branch 'original' with unmodified policies

Change-Id: Ia0b0ae2786caabf70b16020bfdfe26c4b02fa0ea
---
 etc/zaqar/policy.json | 31 +++++++++++++++----------------
 1 file changed, 15 insertions(+), 16 deletions(-)

(limited to 'etc/zaqar/policy.json')

diff --git a/etc/zaqar/policy.json b/etc/zaqar/policy.json
index 9dff654..89d5076 100644
--- a/etc/zaqar/policy.json
+++ b/etc/zaqar/policy.json
@@ -1,34 +1,33 @@
 {
-    "deny_readonly": "not role:readonly",
-    "context_is_admin": "role:admin and rule:deny_readonly",
+    "context_is_admin": "role:admin",
     "admin_or_owner": "is_admin:True or project_id:%(project_id)s",
-    "default": "rule:admin_or_owner and rule:deny_readonly",
+    "default": "rule:admin_or_owner",
 
     "queues:get_all": "",
-    "queues:create": "rule:deny_readonly",
+    "queues:create": "",
     "queues:get": "",
-    "queues:delete": "rule:deny_readonly",
-    "queues:update": "rule:deny_readonly",
+    "queues:delete": "",
+    "queues:update": "",
     "queues:stats": "",
 
     "messages:get_all": "",
-    "messages:create": "rule:deny_readonly",
+    "messages:create": "",
     "messages:get": "",
-    "messages:delete": "rule:deny_readonly",
-    "messages:delete_all": "rule:deny_readonly",
+    "messages:delete": "",
+    "messages:delete_all": "",
 
     "claims:get_all": "",
-    "claims:create": "rule:deny_readonly",
+    "claims:create": "",
     "claims:get": "",
-    "claims:delete": "rule:deny_readonly",
-    "claims:update": "rule:deny_readonly",
+    "claims:delete": "",
+    "claims:update": "",
 
     "subscription:get_all": "",
-    "subscription:create": "rule:deny_readonly",
+    "subscription:create": "",
     "subscription:get": "",
-    "subscription:delete": "rule:deny_readonly",
-    "subscription:update": "rule:deny_readonly",
-    "subscription:confirm": "rule:deny_readonly",
+    "subscription:delete": "",
+    "subscription:update": "",
+    "subscription:confirm": "",
 
     "pools:get_all": "rule:context_is_admin",
     "pools:create": "rule:context_is_admin",
-- 
cgit