keystone-moon/examples/moon/policies/mls_conf/authz/assignment.json


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

{
    "subject_assignments": {
        "subject_security_level":{
            "user1": ["low"],
            "user2": ["medium"],
            "user3": ["high"]
        }
    },

    "action_assignments": {
        "computing_action":{
          "pause": ["vm_admin"],
          "unpause": ["vm_admin"],
          "start": ["vm_admin"],
          "stop": ["vm_admin"]
        }
    },

    "object_assignments": {
        "object_security_level": {
            "vm1": ["low"],
            "vm2": ["medium"]
        }
    }
}