/usr/etc/neutron/policy.d/bgpvpn.conf is in python-networking-bgpvpn 8.0.0-0ubuntu1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 | {
"admin_only": "rule:context_is_admin",
"admin_or_owner": "rule:context_is_admin or tenant_id:%(tenant_id)s",
"create_bgpvpn": "rule:admin_only",
"get_bgpvpn": "rule:admin_or_owner",
"get_bgpvpn:tenant_id": "rule:admin_only",
"get_bgpvpn:route_targets": "rule:admin_only",
"get_bgpvpn:import_targets": "rule:admin_only",
"get_bgpvpn:export_targets": "rule:admin_only",
"get_bgpvpn:route_distinguishers": "rule:admin_only",
"get_bgpvpn:vni": "rule:admin_only",
"update_bgpvpn": "rule:admin_or_owner",
"update_bgpvpn:tenant_id": "rule:admin_only",
"update_bgpvpn:route_targets": "rule:admin_only",
"update_bgpvpn:import_targets": "rule:admin_only",
"update_bgpvpn:export_targets": "rule:admin_only",
"update_bgpvpn:route_distinguishers": "rule:admin_only",
"update_bgpvpn:vni": "rule:admin_only",
"delete_bgpvpn": "rule:admin_only",
"create_bgpvpn_network_association": "rule:admin_or_owner",
"get_bgpvpn_network_association": "rule:admin_or_owner",
"get_bgpvpn_network_association:tenant_id": "rule:admin_only",
"get_bgpvpn_network_associations": "rule:admin_or_owner",
"update_bgpvpn_network_association": "rule:admin_or_owner",
"delete_bgpvpn_network_association": "rule:admin_or_owner",
"create_bgpvpn_router_association": "rule:admin_or_owner",
"get_bgpvpn_router_association": "rule:admin_or_owner",
"get_bgpvpn_router_association:tenant_id": "rule:admin_only",
"get_bgpvpn_router_associations": "rule:admin_or_owner",
"update_bgpvpn_router_association": "rule:admin_or_owner",
"delete_bgpvpn_router_association": "rule:admin_or_owner",
"create_bgpvpn_port_association": "rule:admin_or_owner",
"get_bgpvpn_port_association": "rule:admin_or_owner",
"get_bgpvpn_port_association:tenant_id": "rule:admin_only",
"get_bgpvpn_port_associations": "rule:admin_or_owner",
"update_bgpvpn_port_association": "rule:admin_or_owner",
"delete_bgpvpn_port_association": "rule:admin_or_owner"
}
|