keystone.policy.backends.base module

class keystone.policy.backends.base.PolicyDriverBase

Bases: object

abstract create_policy(policy_id, policy)

Store a policy blob.

Raises

keystone.exception.Conflict – If a duplicate policy exists.

abstract delete_policy(policy_id)

Remove a policy blob.

Raises

keystone.exception.PolicyNotFound – If the policy doesn’t exist.

abstract enforce(context, credentials, action, target)

Verify that a user is authorized to perform action.

For more information on a full implementation of this see: keystone.policy.backends.rules.Policy.enforce

abstract get_policy(policy_id)

Retrieve a specific policy blob.

Raises

keystone.exception.PolicyNotFound – If the policy doesn’t exist.

abstract list_policies()

List all policies.

abstract update_policy(policy_id, policy)

Update a policy blob.

Raises

keystone.exception.PolicyNotFound – If the policy doesn’t exist.