summaryrefslogtreecommitdiffstats
path: root/etc/ceilometer/policy.json
blob: 2b1352976cecdf501e5cc094bfe33ba06cbc6f69 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
{
    "global_readonly": "(role:global_readonly)",
    "readonly": "((project_id:%(project_id)s and role:readonly) or rule:global_readonly)",
    "_member_role": "(role:member or role:_member_)",
    "member": "(project_id:%(project_id)s and rule:_member_role)",
    "admin": "(is_admin:True or role:admin)",
    "owner": "(user_id:%(user_id)s and rule:_member_role)",

    "context_is_admin": "role:admin",
    "segregation": "rule:context_is_admin",

    "telemetry:get_samples": "rule:admin or rule: member",
    "telemetry:get_sample": "rule:admin or rule: member",
    "telemetry:query_sample": "rule:admin or rule: member",
    "telemetry:create_samples": "rule:admin or rule: member",

    "telemetry:compute_statistics": "rule:admin or rule: member",
    "telemetry:get_meters": "rule:admin or rule: member",

    "telemetry:get_resource": "rule:admin or rule: member",
    "telemetry:get_resources": "rule:admin or rule: member",

    "telemetry:events:index": "rule:admin or rule: member",
    "telemetry:events:show": "rule:admin or rule: member"
}