fix: add default perform allow policy to sysadmin

yunionio · Jul 27, 2020 · 3f09d00 · 3f09d00
1 parent 7384251
commit 3f09d00
Showing 1 changed file with 12 additions and 5 deletions.
diff --git a/pkg/keystone/policy/defaults.go b/pkg/keystone/policy/defaults.go
@@ -21,11 +21,12 @@ import (
 )
 
 const (
-	PolicyActionGet    = common_policy.PolicyActionGet
-	PolicyActionList   = common_policy.PolicyActionList
-	PolicyActionCreate = common_policy.PolicyActionCreate
-	PolicyActionUpdate = common_policy.PolicyActionUpdate
-	PolicyActionDelete = common_policy.PolicyActionDelete
+	PolicyActionGet     = common_policy.PolicyActionGet
+	PolicyActionList    = common_policy.PolicyActionList
+	PolicyActionCreate  = common_policy.PolicyActionCreate
+	PolicyActionUpdate  = common_policy.PolicyActionUpdate
+	PolicyActionDelete  = common_policy.PolicyActionDelete
+	PolicyActionPerform = common_policy.PolicyActionPerform
 )
 
 var (
@@ -147,6 +148,12 @@ var (
 					Action:   PolicyActionGet,
 					Result:   rbacutils.Allow,
 				},
+				{
+					Service:  api.SERVICE_TYPE,
+					Resource: "policies",
+					Action:   PolicyActionPerform,
+					Result:   rbacutils.Allow,
+				},
 			},
 		},
 	}