The heat.common.policy Module

Policy Engine For Heat

class heat.common.policy.Enforcer(scope='heat', exc=<class 'heat.common.exception.Forbidden'>)

Bases: object

Responsible for loading and enforcing rules

check(context, action, target)

Verifies that the action is valid on the target in this context.

Parameters:

• context – Heat request context
• action – String representing the action to be checked
• object – Dictionary representing the object of the action.

Returns:

A non-False value if access is allowed.

enforce(context, action, target)

Verifies that the action is valid on the target in this context.

Parameters:

• context – Heat request context
• action – String representing the action to be checked
• object – Dictionary representing the object of the action.

Raises :

self.exc (defaults to heat.common.exception.Forbidden)

Returns:

A non-False value if access is allowed.

load_rules()

Set the rules found in the json file on disk

set_rules(rules)

Create a new Rules object based on the provided dict of rules