Policy configuration¶

karbor¶

context_is_admin

Default:	role:admin

(no description provided)

admin_or_owner

Default:	is_admin:True or (role:admin and is_admin_project:True) or  project_id:%(project_id)s

(no description provided)

default

Default:	rule:admin_or_owner

(no description provided)

admin_api

Default:	is_admin:True or (role:admin and is_admin_project:True)

(no description provided)

plan:create

Default:	rule:admin_or_owner
Operations:	POST /plans

Create a plan.

plan:update

Default:	rule:admin_or_owner
Operations:	PUT /plans/{plan_id}

Update a plan.

plan:delete

Default:	rule:admin_or_owner
Operations:	DELETE /plans/{plan_id}

Delete a plan.

plan:get

Default:	rule:admin_or_owner
Operations:	GET /plans/{plan_id}

Get a plan.

plan:get_all

Default:	rule:admin_or_owner
Operations:	GET /plans

Get plans.

restore:create

Default:	rule:admin_or_owner
Operations:	POST /restores

Create a restore.

restore:update

Default:	rule:admin_or_owner
Operations:	PUT /restores

Update a restore.

restore:get

Default:	rule:admin_or_owner
Operations:	GET /restores/{restore_id}

Get a restore.

restore:get_all

Default:	rule:admin_or_owner
Operations:	GET /restores

Get restores.

protectable:get

Default:	rule:admin_or_owner
Operations:	GET /protectables/{protectable_type}

Show a protectable type.

protectable:get_all

Default:	rule:admin_or_owner
Operations:	GET /protectables

List protectable types.

protectable:instance_get

Default:	rule:admin_or_owner
Operations:	GET /protectables/{protectable_type}/instances/{resource_id}

Show a protectable instance.

protectable:instance_get_all

Default:	rule:admin_or_owner
Operations:	GET /protectables/{protectable_type}/instances

List protectable instances.

provider:get

Default:	rule:admin_or_owner
Operations:	GET /providers/{provider_id}

Show a protection provider.

provider:get_all

Default:	rule:admin_or_owner
Operations:	GET /providers

List protection providers.

provider:checkpoint_get

Default:	rule:admin_or_owner
Operations:	GET /providers/{provider_id}/checkpoints/{checkpoint_id}

Show a checkpoint.

provider:checkpoint_get_all

Default:	rule:admin_or_owner
Operations:	GET /providers/{provider_id}/checkpoints

List checkpoints.

provider:checkpoint_create

Default:	rule:admin_or_owner
Operations:	POST /providers/{provider_id}/checkpoints

Create checkpoint.

provider:checkpoint_delete

Default:	rule:admin_or_owner
Operations:	DELETE /providers/{provider_id}/checkpoints/{checkpoint_id}

Delete checkpoint.

trigger:create

Default:	rule:admin_or_owner
Operations:	POST /triggers

Create a trigger.

trigger:update

Default:	rule:admin_or_owner
Operations:	PUT /triggers/{trigger_id}

Update a trigger.

trigger:delete

Default:	rule:admin_or_owner
Operations:	DELETE /triggers/{trigger_id}

Delete a trigger.

trigger:get

Default:	rule:admin_or_owner
Operations:	GET /triggers/{trigger_id}

Get a trigger.

trigger:list

Default:	rule:admin_or_owner
Operations:	GET /triggers

Get triggerss.

scheduled_operation:create

Default:	rule:admin_or_owner
Operations:	POST /scheduled_operations

Create a scheduled_operation.

scheduled_operation:delete

Default:	rule:admin_or_owner
Operations:	DELETE /scheduled_operations/{scheduled_operation_id}

Delete a scheduled_operation.

scheduled_operation:get

Default:	rule:admin_or_owner
Operations:	GET /scheduled_operations/{scheduled_operation_id}

Get a scheduled_operation.

scheduled_operation:list

Default:	rule:admin_or_owner
Operations:	GET /scheduled_operations

Get scheduled_operations.

operation_log:get

Default:	rule:admin_or_owner
Operations:	GET /operation_logs/{operation_log_id}

Get an operation_log.

operation_log:list

Default:	rule:admin_or_owner
Operations:	GET /operation_logs

Get operation_logs.

verification:create

Default:	rule:admin_or_owner
Operations:	POST /verifications

Create a verification.

verification:get

Default:	rule:admin_or_owner
Operations:	GET /verifications/{verification_id}

Get a verification.

verification:get_all

Default:	rule:admin_or_owner
Operations:	GET /verifications

Get verifications.

service:get_all

Default:	rule:admin_api
Operations:	GET /os-services

List services.

service:update

Default:	rule:admin_api
Operations:	PUT /os-services/{service_id}

Update service status

quota:update

Default:	rule:admin_api
Operations:	PUT /quotas/{project_id}

Update quotas for a project.

quota:delete

Default:	rule:admin_api
Operations:	DELETE /quotas/{project_id}

Delete quotas for a project.

quota:get

Default:	rule:admin_or_owner
Operations:	GET /quotas/{project_id}

Get quotas for a project.

quota:get_default

Default:	rule:admin_or_owner
Operations:	GET /quotas/{project_id}/defaults

Get default quotas for a project.

quota_class:update

Default:	rule:admin_api
Operations:	PUT /quota_classes/{quota_class_name}

Update quota classes.

quota_class:get

Default:	rule:admin_or_owner
Operations:	GET /quota_classes/{quota_class_name}

Get quota classes.

copy:create

Default:	rule:admin_or_owner
Operations:	POST /{project_id}/providers/{provider_id}/checkpoints/action

Create a copy.