summaryrefslogtreecommitdiffstats
path: root/keystone-moon/examples/moon/policies/policy_rbac_admin/scope.json
diff options
context:
space:
mode:
authorWuKong <rebirthmonkey@gmail.com>2015-10-12 14:29:11 +0200
committerWuKong <rebirthmonkey@gmail.com>2015-10-12 14:29:11 +0200
commita363067a1bdf411c28032b926b451fc9d0964dc6 (patch)
treeb663db364a162232602210da11df567d286296ac /keystone-moon/examples/moon/policies/policy_rbac_admin/scope.json
parent43da0e268fd88c05e49a3d949e3685a13fa43926 (diff)
create scenario test
Change-Id: Id392d900583a31fb53a9da5bcb0c47746f34491a Signed-off-by: WuKong <rebirthmonkey@gmail.com>
Diffstat (limited to 'keystone-moon/examples/moon/policies/policy_rbac_admin/scope.json')
-rw-r--r--keystone-moon/examples/moon/policies/policy_rbac_admin/scope.json48
1 files changed, 48 insertions, 0 deletions
diff --git a/keystone-moon/examples/moon/policies/policy_rbac_admin/scope.json b/keystone-moon/examples/moon/policies/policy_rbac_admin/scope.json
new file mode 100644
index 00000000..149056a6
--- /dev/null
+++ b/keystone-moon/examples/moon/policies/policy_rbac_admin/scope.json
@@ -0,0 +1,48 @@
+{
+ "subject_scopes": {
+ "role": [
+ "root_role",
+ "dev_role"
+ ]
+ },
+ "action_scopes": {
+ "action_id": [
+ "read",
+ "write"
+ ]
+ },
+ "object_scopes": {
+ "object_id": [
+ "authz.subjects",
+ "authz.objects",
+ "authz.actions",
+ "authz.subject_categories",
+ "authz.object_categories",
+ "authz.action_categories",
+ "authz.subject_scopes",
+ "authz.object_scopes",
+ "authz.action_scopes",
+ "authz.subject_assignments",
+ "authz.object_assignments",
+ "authz.action_assignments",
+ "authz.aggregation_algorithm",
+ "authz.sub_meta_rules",
+ "authz.rules",
+ "admin.subjects",
+ "admin.objects",
+ "admin.actions",
+ "admin.subject_categories",
+ "admin.object_categories",
+ "admin.action_categories",
+ "admin.subject_scopes",
+ "admin.object_scopes",
+ "admin.action_scopes",
+ "admin.subject_assignments",
+ "admin.object_assignments",
+ "admin.action_assignments",
+ "admin.aggregation_algorithm",
+ "admin.sub_meta_rules",
+ "admin.rules"
+ ]
+ }
+}