diff --git a/kmip/core/policy.py b/kmip/core/policy.py index 33005d5..05d15c9 100644 --- a/kmip/core/policy.py +++ b/kmip/core/policy.py @@ -123,6 +123,7 @@ policies = { enums.Operation.ADD_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.MODIFY_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.DELETE_ATTRIBUTE: enums.Policy.ALLOW_OWNER, + enums.Operation.SET_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.OBTAIN_LEASE: enums.Policy.ALLOW_ALL, enums.Operation.ACTIVATE: enums.Policy.ALLOW_OWNER, enums.Operation.REVOKE: enums.Policy.ALLOW_OWNER, @@ -142,6 +143,7 @@ policies = { enums.Operation.ADD_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.MODIFY_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.DELETE_ATTRIBUTE: enums.Policy.ALLOW_OWNER, + enums.Operation.SET_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.OBTAIN_LEASE: enums.Policy.ALLOW_OWNER, enums.Operation.GET_USAGE_ALLOCATION: enums.Policy.ALLOW_OWNER, enums.Operation.ACTIVATE: enums.Policy.ALLOW_OWNER, @@ -159,6 +161,7 @@ policies = { enums.Operation.ADD_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.MODIFY_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.DELETE_ATTRIBUTE: enums.Policy.ALLOW_OWNER, + enums.Operation.SET_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.OBTAIN_LEASE: enums.Policy.ALLOW_ALL, enums.Operation.ACTIVATE: enums.Policy.ALLOW_OWNER, enums.Operation.REVOKE: enums.Policy.ALLOW_OWNER, @@ -178,6 +181,7 @@ policies = { enums.Operation.ADD_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.MODIFY_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.DELETE_ATTRIBUTE: enums.Policy.ALLOW_OWNER, + enums.Operation.SET_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.OBTAIN_LEASE: enums.Policy.ALLOW_OWNER, enums.Operation.GET_USAGE_ALLOCATION: enums.Policy.ALLOW_OWNER, enums.Operation.ACTIVATE: enums.Policy.ALLOW_OWNER, @@ -198,6 +202,7 @@ policies = { enums.Operation.ADD_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.MODIFY_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.DELETE_ATTRIBUTE: enums.Policy.ALLOW_OWNER, + enums.Operation.SET_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.OBTAIN_LEASE: enums.Policy.ALLOW_OWNER, enums.Operation.GET_USAGE_ALLOCATION: enums.Policy.ALLOW_OWNER, enums.Operation.ACTIVATE: enums.Policy.ALLOW_OWNER, @@ -214,6 +219,7 @@ policies = { enums.Operation.ADD_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.MODIFY_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.DELETE_ATTRIBUTE: enums.Policy.ALLOW_OWNER, + enums.Operation.SET_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.DESTROY: enums.Policy.ALLOW_OWNER }, enums.ObjectType.SECRET_DATA: { @@ -228,6 +234,7 @@ policies = { enums.Operation.ADD_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.MODIFY_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.DELETE_ATTRIBUTE: enums.Policy.ALLOW_OWNER, + enums.Operation.SET_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.OBTAIN_LEASE: enums.Policy.ALLOW_OWNER, enums.Operation.GET_USAGE_ALLOCATION: enums.Policy.ALLOW_OWNER, enums.Operation.ACTIVATE: enums.Policy.ALLOW_OWNER, @@ -248,6 +255,7 @@ policies = { enums.Operation.ADD_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.MODIFY_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.DELETE_ATTRIBUTE: enums.Policy.ALLOW_OWNER, + enums.Operation.SET_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.OBTAIN_LEASE: enums.Policy.ALLOW_OWNER, enums.Operation.GET_USAGE_ALLOCATION: enums.Policy.ALLOW_OWNER, enums.Operation.ACTIVATE: enums.Policy.ALLOW_OWNER, @@ -268,6 +276,7 @@ policies = { enums.Operation.ADD_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.MODIFY_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.DELETE_ATTRIBUTE: enums.Policy.ALLOW_OWNER, + enums.Operation.SET_ATTRIBUTE: enums.Policy.ALLOW_OWNER, enums.Operation.OBTAIN_LEASE: enums.Policy.ALLOW_OWNER, enums.Operation.GET_USAGE_ALLOCATION: enums.Policy.ALLOW_OWNER, enums.Operation.ACTIVATE: enums.Policy.ALLOW_OWNER, @@ -288,6 +297,7 @@ policies = { enums.Operation.ADD_ATTRIBUTE: enums.Policy.DISALLOW_ALL, enums.Operation.MODIFY_ATTRIBUTE: enums.Policy.DISALLOW_ALL, enums.Operation.DELETE_ATTRIBUTE: enums.Policy.DISALLOW_ALL, + enums.Operation.SET_ATTRIBUTE: enums.Policy.DISALLOW_ALL, enums.Operation.DESTROY: enums.Policy.DISALLOW_ALL } }