From 9fdb85c4f4867d0bcbe71f37fd8b1d40d6178747 Mon Sep 17 00:00:00 2001 From: WuKong Date: Tue, 21 Jul 2015 15:46:59 +0200 Subject: add super_extension Change-Id: I2f9e7bc1aa658e8a7ffb222a49abb2370cf1492f Signed-off-by: WuKong --- keystone-moon/examples/moon/policies/policy_super/assignment.json | 3 ++- keystone-moon/examples/moon/policies/policy_super/metadata.json | 4 ++-- keystone-moon/examples/moon/policies/policy_super/perimeter.json | 3 ++- keystone-moon/examples/moon/policies/policy_super/rule.json | 4 +++- keystone-moon/examples/moon/policies/policy_super/scope.json | 3 ++- 5 files changed, 11 insertions(+), 6 deletions(-) (limited to 'keystone-moon/examples') diff --git a/keystone-moon/examples/moon/policies/policy_super/assignment.json b/keystone-moon/examples/moon/policies/policy_super/assignment.json index 3e10a055..352575aa 100644 --- a/keystone-moon/examples/moon/policies/policy_super/assignment.json +++ b/keystone-moon/examples/moon/policies/policy_super/assignment.json @@ -17,7 +17,8 @@ "templates": ["templates"], "sub_meta_rule_algorithm": ["sub_meta_rule_relations"], "aggregation_algorithms": ["aggregation_algorithms"], - "tenants": ["tenants"] + "tenants": ["tenants"], + "intra_extensions": ["intra_extensions"] } } } diff --git a/keystone-moon/examples/moon/policies/policy_super/metadata.json b/keystone-moon/examples/moon/policies/policy_super/metadata.json index b6eb92f3..a67670e9 100644 --- a/keystone-moon/examples/moon/policies/policy_super/metadata.json +++ b/keystone-moon/examples/moon/policies/policy_super/metadata.json @@ -1,7 +1,7 @@ { - "name": "MLS_metadata", + "name": "Super_Extension", "model": "RBAC", - "genre": "admin", + "genre": "authz", "description": "", "subject_categories": [ diff --git a/keystone-moon/examples/moon/policies/policy_super/perimeter.json b/keystone-moon/examples/moon/policies/policy_super/perimeter.json index e0be02fa..3a7364bc 100644 --- a/keystone-moon/examples/moon/policies/policy_super/perimeter.json +++ b/keystone-moon/examples/moon/policies/policy_super/perimeter.json @@ -10,6 +10,7 @@ "templates", "aggregation_algorithms", "sub_meta_rule_algorithms", - "tenants" + "tenants", + "intra_extensions" ] } diff --git a/keystone-moon/examples/moon/policies/policy_super/rule.json b/keystone-moon/examples/moon/policies/policy_super/rule.json index 234158bc..b3115a90 100644 --- a/keystone-moon/examples/moon/policies/policy_super/rule.json +++ b/keystone-moon/examples/moon/policies/policy_super/rule.json @@ -4,9 +4,11 @@ ["admin" , "read", "aggregation_algorithms"], ["admin" , "read", "sub_meta_rule_algorithms"], ["admin" , "read", "tenants"], + ["admin" , "read", "intra_extensions"], ["admin" , "write", "templates"], ["admin" , "write", "aggregation_algorithms"], ["admin" , "write", "sub_meta_rule_algorithms"], - ["admin" , "write", "tenants"] + ["admin" , "write", "tenants"], + ["admin" , "write", "intra_extensions"] ] } diff --git a/keystone-moon/examples/moon/policies/policy_super/scope.json b/keystone-moon/examples/moon/policies/policy_super/scope.json index bac0b47a..d581c747 100644 --- a/keystone-moon/examples/moon/policies/policy_super/scope.json +++ b/keystone-moon/examples/moon/policies/policy_super/scope.json @@ -17,7 +17,8 @@ "templates", "aggregation_algorithms", "sub_meta_rule_algorithms", - "tenants" + "tenants", + "intra_extensions" ] } } -- cgit 1.2.3-korg