/etc/manila/policy.json is in manila-common 2014.1~git20140220-0ubuntu12.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 | {
"context_is_admin": [["role:admin"]],
"admin_or_owner": [["is_admin:True"], ["project_id:%(project_id)s"]],
"default": [["rule:admin_or_owner"]],
"admin_api": [["is_admin:True"]],
"share:create": [],
"share:get_all": ["project_id:%(project_id)s"],
"share:get_snapshot": ["project_id:%(project_id)s"],
"share:get_all_snapshots": ["project_id:%(project_id)s"],
"share_extension:quotas:show": [],
"share_extension:quotas:update_for_project": [["rule:admin_api"]],
"share_extension:quotas:update_for_user": [["rule:admin_or_projectadmin"]],
"share_extension:quota_classes": [],
"share_extension:share_admin_actions:reset_status": [["rule:admin_api"]],
"share_extension:snapshot_admin_actions:reset_status": [["rule:admin_api"]],
"share_extension:services": [["rule:admin_api"]],
"security_service:create": [["rule:admin_api"]],
"security_service:delete": [["rule:admin_api"]],
"security_service:update": [["rule:admin_api"]],
"share_network:create": [["rule:admin_api"]],
"share_network:delete": [["rule:admin_api"]],
"share_network:update": [["rule:admin_api"]],
"share_network:add_security_service": [["rule:admin_api"]],
"share_network:remove_security_service": [["rule:admin_api"]]
}
|