summaryrefslogtreecommitdiffstats
path: root/etc/glance/policy.json
blob: 7913cf1d09ca3b48ab17c0ff90216b0e23eaf989 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
{
    "deny_readonly": "not role:readonly",
    "context_is_admin":  "role:admin and rule:deny_readonly",
    "default": "role:admin",

    "add_image": "rule:deny_readonly",
    "delete_image": "rule:deny_readonly",
    "get_image": "",
    "get_images": "",
    "modify_image": "rule:deny_readonly",
    "publicize_image": "role:admin",
    "copy_from": "rule:deny_readonly",

    "download_image": "rule:deny_readonly",
    "upload_image": "rule:deny_readonly",

    "delete_image_location": "rule:deny_readonly",
    "get_image_location": "",
    "set_image_location": "rule:deny_readonly",

    "add_member": "rule:deny_readonly",
    "delete_member": "rule:deny_readonly",
    "get_member": "",
    "get_members": "",
    "modify_member": "rule:deny_readonly",

    "manage_image_cache": "role:admin",

    "get_task": "role:admin",
    "get_tasks": "role:admin",
    "add_task": "role:admin and rule:deny_readonly",
    "modify_task": "role:admin and rule:deny_readonly",

    "deactivate": "rule:deny_readonly",
    "reactivate": "rule:deny_readonly",

    "get_metadef_namespace": "",
    "get_metadef_namespaces":"",
    "modify_metadef_namespace":"rule:deny_readonly",
    "add_metadef_namespace":"rule:deny_readonly",

    "get_metadef_object":"",
    "get_metadef_objects":"",
    "modify_metadef_object":"rule:deny_readonly",
    "add_metadef_object":"rule:deny_readonly",

    "list_metadef_resource_types":"",
    "get_metadef_resource_type":"",
    "add_metadef_resource_type_association":"rule:deny_readonly",

    "get_metadef_property":"",
    "get_metadef_properties":"",
    "modify_metadef_property":"rule:deny_readonly",
    "add_metadef_property":"rule:deny_readonly",

    "get_metadef_tag":"",
    "get_metadef_tags":"",
    "modify_metadef_tag":"rule:deny_readonly",
    "add_metadef_tag":"rule:deny_readonly",
    "add_metadef_tags":"rule:deny_readonly"

}