summaryrefslogtreecommitdiffstats
path: root/etc/sahara/policy.json
blob: 15eeb6928c6ea1efb17d1ff859dda4dc40ea1d9c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
{
    "global_readonly": "(role:global_readonly)",
    "readonly": "((project_id:%(project_id)s and role:readonly) or rule:global_readonly)",
    "_member_role": "(role:member or role:_member_)",
    "member": "(project_id:%(project_id)s and rule:_member_role)",
    "admin": "(is_admin:True or role:admin)",
    "owner": "(user_id:%(user_id)s and rule:_member_role)",

    "default": "rule:admin or rule:member",

    "data-processing:clusters:get_all": "rule:admin or rule:member",
    "data-processing:clusters:create": "rule:admin or rule:member",
    "data-processing:clusters:scale": "rule:admin or rule:member",
    "data-processing:clusters:get": "rule:admin or rule:member",
    "data-processing:clusters:delete": "rule:admin or rule:member",
    "data-processing:clusters:modify": "rule:admin or rule:member",

    "data-processing:cluster-templates:get_all": "rule:admin or rule:member",
    "data-processing:cluster-templates:create": "rule:admin or rule:member",
    "data-processing:cluster-templates:get": "rule:admin or rule:member",
    "data-processing:cluster-templates:modify": "rule:admin or rule:member",
    "data-processing:cluster-templates:delete": "rule:admin or rule:member",

    "data-processing:node-group-templates:get_all": "rule:admin or rule:member",
    "data-processing:node-group-templates:create": "rule:admin or rule:member",
    "data-processing:node-group-templates:get": "rule:admin or rule:member",
    "data-processing:node-group-templates:modify": "rule:admin or rule:member",
    "data-processing:node-group-templates:delete": "rule:admin or rule:member",

    "data-processing:plugins:get_all": "rule:admin or rule:member",
    "data-processing:plugins:get": "rule:admin or rule:member",
    "data-processing:plugins:get_version": "rule:admin or rule:member",
    "data-processing:plugins:convert_config": "rule:admin or rule:member",
    "data-processing:plugins:patch": "rule:admin",

    "data-processing:images:get_all": "rule:admin or rule:member",
    "data-processing:images:get": "rule:admin or rule:member",
    "data-processing:images:register": "rule:admin or rule:member",
    "data-processing:images:unregister": "rule:admin or rule:member",
    "data-processing:images:add_tags": "rule:admin or rule:member",
    "data-processing:images:remove_tags": "rule:admin or rule:member",

    "data-processing:job-executions:get_all": "rule:admin or rule:member",
    "data-processing:job-executions:get": "rule:admin or rule:member",
    "data-processing:job-executions:refresh_status": "rule:admin or rule:member",
    "data-processing:job-executions:cancel": "rule:admin or rule:member",
    "data-processing:job-executions:delete": "rule:admin or rule:member",
    "data-processing:job-executions:modify": "rule:admin or rule:member",

    "data-processing:data-sources:get_all": "rule:admin or rule:member",
    "data-processing:data-sources:get": "rule:admin or rule:member",
    "data-processing:data-sources:register": "rule:admin or rule:member",
    "data-processing:data-sources:delete": "rule:admin or rule:member",
    "data-processing:data-sources:modify": "rule:admin or rule:member",

    "data-processing:jobs:get_all": "rule:admin or rule:member",
    "data-processing:jobs:create": "rule:admin or rule:member",
    "data-processing:jobs:get": "rule:admin or rule:member",
    "data-processing:jobs:delete": "rule:admin or rule:member",
    "data-processing:jobs:get_config_hints": "rule:admin or rule:member",
    "data-processing:jobs:execute": "rule:admin or rule:member",
    "data-processing:jobs:modify": "rule:admin or rule:member",

    "data-processing:job-binaries:get_all": "rule:admin or rule:member",
    "data-processing:job-binaries:create": "rule:admin or rule:member",
    "data-processing:job-binaries:get": "rule:admin or rule:member",
    "data-processing:job-binaries:delete": "rule:admin or rule:member",
    "data-processing:job-binaries:get_data": "rule:admin or rule:member",
    "data-processing:job-binaries:modify": "rule:admin or rule:member",

    "data-processing:job-binary-internals:get_all": "rule:admin or rule:member",
    "data-processing:job-binary-internals:create": "rule:admin or rule:member",
    "data-processing:job-binary-internals:get": "rule:admin or rule:member",
    "data-processing:job-binary-internals:delete": "rule:admin or rule:member",
    "data-processing:job-binary-internals:get_data": "rule:admin or rule:member",
    "data-processing:job-binary-internals:modify": "rule:admin or rule:member",

    "data-processing:job-types:get_all": "rule:admin or rule:member"
}