Keystone policy文件介绍

最新推荐文章于 2024-04-20 16:22:43 发布

原创

最新推荐文章于 2024-04-20 16:22:43 发布 · 1k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#keystone

一 policy.json文件截图

二文件内容

该文件描述的是执行某一个命令需要的权限。

[root@controller0 ~]# cat /etc/keystone/policy.json
{
    "admin_required": "role:admin or is_admin:1",
    "service_role": "role:service",
    "service_or_admin": "rule:admin_required or rule:service_role",
    "owner" : "user_id:%(user_id)s",
    "admin_or_owner": "rule:admin_required or rule:owner",
    "default": "rule:admin_required",
    "identity:get_region": "",
    "identity:list_regions": "",
    "identity:create_region": "rule:admin_required",
    "identity:update_region": "rule:admin_required",
    "identity:delete_region": "rule:admin_required",
    "identity:get_service": "rule:admin_req