keystone-moon/examples/moon/policies/policy_mls_authz/assignment.json


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

{
    "subject_assignments": {
        "subject_security_level":{
        }
    },

    "action_assignments": {
        "computing_action":{
          "pause": ["vm_admin"],
          "unpause": ["vm_admin"],
          "start": ["vm_admin"],
          "stop": ["vm_admin"],
          "list": ["vm_access", "vm_admin"],
          "create": ["vm_admin"]
        }
    },

    "object_assignments": {
        "object_security_level": {
            "servers": ["low"]
        }
    }
}