etc/aodh/policy.json


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

{
    "deny_readonly": "not role:readonly",
    "context_is_admin": "role:admin",
    "segregation": "rule:context_is_admin",
    "admin_or_owner": "rule:context_is_admin or project_id:%(project_id)s",
    "default": "rule:admin_or_owner",

    "telemetry:get_alarm": "rule:admin_or_owner",
    "telemetry:get_alarms": "rule:admin_or_owner",
    "telemetry:query_alarm": "rule:admin_or_owner",

    "telemetry:create_alarm": "rule:deny_readonly",
    "telemetry:change_alarm": "rule:admin_or_owner and rule:deny_readonly",
    "telemetry:delete_alarm": "rule:admin_or_owner and rule:deny_readonly",

    "telemetry:get_alarm_state": "rule:admin_or_owner",
    "telemetry:change_alarm_state": "rule:admin_or_owner and rule:deny_readonly",

    "telemetry:alarm_history": "rule:admin_or_owner",
    "telemetry:query_alarm_history": "rule:admin_or_owner"
}