diff options
| author |   asteroide <thomas.duval@orange.com> | 2016-04-22 16:06:08 +0200 |
|---|---|---|
| committer | asteroide <thomas.duval@orange.com> | 2016-04-22 16:06:08 +0200 |
| commit | 8c6291c915bd9f806600642b188f2bbb5fc716bc (patch) | |
| tree | 00ab9e1ebb3a8c7bd8d47058cbf03c623ed02799 /keystone-moon/etc/policies/policy_authz/rule.json | |
| parent | 9bb6f3e3465fd0e278cbd2b35d42e30ce66bfbee (diff) | |
Move policy files to a better location for the installation process.
Change-Id: If74a878058983df8e432927e87b3da69214d9888
Diffstat (limited to 'keystone-moon/etc/policies/policy_authz/rule.json')
| -rw-r--r-- | keystone-moon/etc/policies/policy_authz/rule.json | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/keystone-moon/etc/policies/policy_authz/rule.json b/keystone-moon/etc/policies/policy_authz/rule.json new file mode 100644 index 00000000..25f9d93a --- /dev/null +++ b/keystone-moon/etc/policies/policy_authz/rule.json @@ -0,0 +1,25 @@ +{ + "mls_rule":[ + ["high", "vm_admin", "medium"], + ["high", "vm_admin", "low"], + ["medium", "vm_admin", "low"], + ["high", "vm_access", "high"], + ["high", "vm_access", "medium"], + ["high", "vm_access", "low"], + ["medium", "vm_access", "medium"], + ["medium", "vm_access", "low"], + ["low", "vm_access", "low"] + ], + "dte_rule":[ + ["ft", "read", "computing"], + ["ft", "write", "computing"], + ["ft", "read", "storage"], + ["ft", "write", "storage"], + ["xx", "read", "storage"] + ], + "rbac_rule":[ + ["dev", "xx", "read", "servers"], + ["admin", "xx", "read", "servers"], + ["admin", "ft", "read", "servers"] + ] +} |