Add an empty admin policy.

Change-Id: Iafd5faef37506416b736dba374e1839b5d380faa

diff --git a/keystone-moon/examples/moon/policies/policy_empty_admin/assignment.json b/keystone-moon/examples/moon/policies/policy_empty_admin/assignment.json
new file mode 100644 (file)
index 0000000..24018a0
--- /dev/null
+++ b/keystone-moon/examples/moon/policies/policy_empty_admin/assignment.json
@@ -0,0 +1,7 @@
+{
+    "subject_assignments": {},
+
+    "action_assignments": {},
+
+    "object_assignments": {}
+}

diff --git a/keystone-moon/examples/moon/policies/policy_empty_admin/metadata.json b/keystone-moon/examples/moon/policies/policy_empty_admin/metadata.json
new file mode 100644 (file)
index 0000000..3c9be2e
--- /dev/null
+++ b/keystone-moon/examples/moon/policies/policy_empty_admin/metadata.json
@@ -0,0 +1,12 @@
+{
+    "name": "Empty_Policy",
+    "model": "",
+    "genre": "admin",
+    "description": "Empty Policy",
+
+    "subject_categories": [],
+
+    "action_categories": [],
+
+    "object_categories": []
+}

diff --git a/keystone-moon/examples/moon/policies/policy_empty_admin/metarule.json b/keystone-moon/examples/moon/policies/policy_empty_admin/metarule.json
new file mode 100644 (file)
index 0000000..7acd884
--- /dev/null
+++ b/keystone-moon/examples/moon/policies/policy_empty_admin/metarule.json
@@ -0,0 +1,12 @@
+{
+    "sub_meta_rules": {
+               "mls_rule": {
+                       "subject_categories": [],
+                       "action_categories": [],
+                       "object_categories": [],
+                       "algorithm": ""
+               }
+       },
+       "aggregation": ""
+}
+

diff --git a/keystone-moon/examples/moon/policies/policy_empty_admin/perimeter.json b/keystone-moon/examples/moon/policies/policy_empty_admin/perimeter.json
new file mode 100644 (file)
index 0000000..54dbfc3
--- /dev/null
+++ b/keystone-moon/examples/moon/policies/policy_empty_admin/perimeter.json
@@ -0,0 +1,39 @@
+{
+    "subjects": [],
+    "actions": [
+        "read",
+        "write"
+    ],
+    "objects": [
+        "authz.subjects",
+        "authz.objects",
+        "authz.actions",
+        "authz.subject_categories",
+        "authz.object_categories",
+        "authz.action_categories",
+        "authz.subject_scopes",
+        "authz.object_scopes",
+        "authz.action_scopes",
+        "authz.subject_assignments",
+        "authz.object_assignments",
+        "authz.action_assignments",
+        "authz.aggregation_algorithm",
+        "authz.sub_meta_rules",
+        "authz.rules",
+        "admin.subjects",
+        "admin.objects",
+        "admin.actions",
+        "admin.subject_categories",
+        "admin.object_categories",
+        "admin.action_categories",
+        "admin.subject_scopes",
+        "admin.object_scopes",
+        "admin.action_scopes",
+        "admin.subject_assignments",
+        "admin.object_assignments",
+        "admin.action_assignments",
+        "admin.aggregation_algorithm",
+        "admin.sub_meta_rules",
+        "admin.rules"
+    ]
+}

diff --git a/keystone-moon/examples/moon/policies/policy_empty_admin/rule.json b/keystone-moon/examples/moon/policies/policy_empty_admin/rule.json
new file mode 100644 (file)
index 0000000..fe4fae5
--- /dev/null
+++ b/keystone-moon/examples/moon/policies/policy_empty_admin/rule.json
@@ -0,0 +1,3 @@
+{
+       "mls_rule":[]
+}

diff --git a/keystone-moon/examples/moon/policies/policy_empty_admin/scope.json b/keystone-moon/examples/moon/policies/policy_empty_admin/scope.json
new file mode 100644 (file)
index 0000000..1efebe6
--- /dev/null
+++ b/keystone-moon/examples/moon/policies/policy_empty_admin/scope.json
@@ -0,0 +1,7 @@
+{
+  "subject_scopes": {},
+
+  "action_scopes": {},
+
+  "object_scopes": {}
+}