summaryrefslogtreecommitdiffstats
path: root/keystone-moon/examples
diff options
context:
space:
mode:
Diffstat (limited to 'keystone-moon/examples')
-rw-r--r--keystone-moon/examples/moon/policies/policy_super/assignment.json3
-rw-r--r--keystone-moon/examples/moon/policies/policy_super/metadata.json4
-rw-r--r--keystone-moon/examples/moon/policies/policy_super/perimeter.json3
-rw-r--r--keystone-moon/examples/moon/policies/policy_super/rule.json4
-rw-r--r--keystone-moon/examples/moon/policies/policy_super/scope.json3
5 files changed, 11 insertions, 6 deletions
diff --git a/keystone-moon/examples/moon/policies/policy_super/assignment.json b/keystone-moon/examples/moon/policies/policy_super/assignment.json
index 3e10a055..352575aa 100644
--- a/keystone-moon/examples/moon/policies/policy_super/assignment.json
+++ b/keystone-moon/examples/moon/policies/policy_super/assignment.json
@@ -17,7 +17,8 @@
"templates": ["templates"],
"sub_meta_rule_algorithm": ["sub_meta_rule_relations"],
"aggregation_algorithms": ["aggregation_algorithms"],
- "tenants": ["tenants"]
+ "tenants": ["tenants"],
+ "intra_extensions": ["intra_extensions"]
}
}
}
diff --git a/keystone-moon/examples/moon/policies/policy_super/metadata.json b/keystone-moon/examples/moon/policies/policy_super/metadata.json
index b6eb92f3..a67670e9 100644
--- a/keystone-moon/examples/moon/policies/policy_super/metadata.json
+++ b/keystone-moon/examples/moon/policies/policy_super/metadata.json
@@ -1,7 +1,7 @@
{
- "name": "MLS_metadata",
+ "name": "Super_Extension",
"model": "RBAC",
- "genre": "admin",
+ "genre": "authz",
"description": "",
"subject_categories": [
diff --git a/keystone-moon/examples/moon/policies/policy_super/perimeter.json b/keystone-moon/examples/moon/policies/policy_super/perimeter.json
index e0be02fa..3a7364bc 100644
--- a/keystone-moon/examples/moon/policies/policy_super/perimeter.json
+++ b/keystone-moon/examples/moon/policies/policy_super/perimeter.json
@@ -10,6 +10,7 @@
"templates",
"aggregation_algorithms",
"sub_meta_rule_algorithms",
- "tenants"
+ "tenants",
+ "intra_extensions"
]
}
diff --git a/keystone-moon/examples/moon/policies/policy_super/rule.json b/keystone-moon/examples/moon/policies/policy_super/rule.json
index 234158bc..b3115a90 100644
--- a/keystone-moon/examples/moon/policies/policy_super/rule.json
+++ b/keystone-moon/examples/moon/policies/policy_super/rule.json
@@ -4,9 +4,11 @@
["admin" , "read", "aggregation_algorithms"],
["admin" , "read", "sub_meta_rule_algorithms"],
["admin" , "read", "tenants"],
+ ["admin" , "read", "intra_extensions"],
["admin" , "write", "templates"],
["admin" , "write", "aggregation_algorithms"],
["admin" , "write", "sub_meta_rule_algorithms"],
- ["admin" , "write", "tenants"]
+ ["admin" , "write", "tenants"],
+ ["admin" , "write", "intra_extensions"]
]
}
diff --git a/keystone-moon/examples/moon/policies/policy_super/scope.json b/keystone-moon/examples/moon/policies/policy_super/scope.json
index bac0b47a..d581c747 100644
--- a/keystone-moon/examples/moon/policies/policy_super/scope.json
+++ b/keystone-moon/examples/moon/policies/policy_super/scope.json
@@ -17,7 +17,8 @@
"templates",
"aggregation_algorithms",
"sub_meta_rule_algorithms",
- "tenants"
+ "tenants",
+ "intra_extensions"
]
}
}