Update operation policy file examples

This change updates the operation policy files provided under the
examples directory to reflect the new group-based policy model. A
future patch will include documentation describing this model.
This commit is contained in:
Peter Hamilton 2018-02-19 12:25:21 -05:00
parent 7f8ace909c
commit 78190bbdce
2 changed files with 329 additions and 161 deletions

166
examples/legacy_policy.json Normal file
View File

@ -0,0 +1,166 @@
{
"example": {
"CERTIFICATE": {
"LOCATE": "ALLOW_ALL",
"CHECK": "ALLOW_ALL",
"GET": "ALLOW_ALL",
"GET_ATTRIBUTES": "ALLOW_ALL",
"GET_ATTRIBUTE_LIST": "ALLOW_ALL",
"ADD_ATTRIBUTE": "ALLOW_OWNER",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER",
"OBTAIN_LEASE": "ALLOW_ALL",
"ACTIVATE": "ALLOW_OWNER",
"REVOKE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER",
"ARCHIVE": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER"
},
"SYMMETRIC_KEY": {
"REKEY": "ALLOW_OWNER",
"REKEY_KEY_PAIR": "ALLOW_OWNER",
"DERIVE_KEY": "ALLOW_OWNER",
"LOCATE": "ALLOW_OWNER",
"CHECK": "ALLOW_OWNER",
"GET": "ALLOW_OWNER",
"GET_ATTRIBUTES": "ALLOW_OWNER",
"GET_ATTRIBUTE_LIST": "ALLOW_OWNER",
"ADD_ATTRIBUTE": "ALLOW_OWNER",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER",
"OBTAIN_LEASE": "ALLOW_OWNER",
"GET_USAGE_ALLOCATION": "ALLOW_OWNER",
"ACTIVATE": "ALLOW_OWNER",
"REVOKE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER",
"ARCHIVE": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER"
},
"PUBLIC_KEY": {
"LOCATE": "ALLOW_ALL",
"CHECK": "ALLOW_ALL",
"GET": "ALLOW_ALL",
"GET_ATTRIBUTES": "ALLOW_ALL",
"GET_ATTRIBUTE_LIST": "ALLOW_ALL",
"ADD_ATTRIBUTE": "ALLOW_OWNER",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER",
"OBTAIN_LEASE": "ALLOW_ALL",
"ACTIVATE": "ALLOW_OWNER",
"REVOKE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER",
"ARCHIVE": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER"
},
"PRIVATE_KEY": {
"REKEY": "ALLOW_OWNER",
"REKEY_KEY_PAIR": "ALLOW_OWNER",
"DERIVE_KEY": "ALLOW_OWNER",
"LOCATE": "ALLOW_OWNER",
"CHECK": "ALLOW_OWNER",
"GET": "ALLOW_OWNER",
"GET_ATTRIBUTES": "ALLOW_OWNER",
"GET_ATTRIBUTE_LIST": "ALLOW_OWNER",
"ADD_ATTRIBUTE": "ALLOW_OWNER",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER",
"OBTAIN_LEASE": "ALLOW_OWNER",
"GET_USAGE_ALLOCATION": "ALLOW_OWNER",
"ACTIVATE": "ALLOW_OWNER",
"REVOKE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER",
"ARCHIVE": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER"
},
"SPLIT_KEY": {
"REKEY": "ALLOW_OWNER",
"REKEY_KEY_PAIR": "ALLOW_OWNER",
"DERIVE_KEY": "ALLOW_OWNER",
"LOCATE": "ALLOW_OWNER",
"CHECK": "ALLOW_OWNER",
"GET": "ALLOW_OWNER",
"GET_ATTRIBUTES": "ALLOW_OWNER",
"GET_ATTRIBUTE_LIST": "ALLOW_OWNER",
"ADD_ATTRIBUTE": "ALLOW_OWNER",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER",
"OBTAIN_LEASE": "ALLOW_OWNER",
"GET_USAGE_ALLOCATION": "ALLOW_OWNER",
"ACTIVATE": "ALLOW_OWNER",
"REVOKE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER",
"ARCHIVE": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER"
},
"TEMPLATE": {
"LOCATE": "ALLOW_OWNER",
"GET": "ALLOW_OWNER",
"GET_ATTRIBUTES": "ALLOW_OWNER",
"GET_ATTRIBUTE_LIST": "ALLOW_OWNER",
"ADD_ATTRIBUTE": "ALLOW_OWNER",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER"
},
"SECRET_DATA": {
"REKEY": "ALLOW_OWNER",
"REKEY_KEY_PAIR": "ALLOW_OWNER",
"DERIVE_KEY": "ALLOW_OWNER",
"LOCATE": "ALLOW_OWNER",
"CHECK": "ALLOW_OWNER",
"GET": "ALLOW_OWNER",
"GET_ATTRIBUTES": "ALLOW_OWNER",
"GET_ATTRIBUTE_LIST": "ALLOW_OWNER",
"ADD_ATTRIBUTE": "ALLOW_OWNER",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER",
"OBTAIN_LEASE": "ALLOW_OWNER",
"GET_USAGE_ALLOCATION": "ALLOW_OWNER",
"ACTIVATE": "ALLOW_OWNER",
"REVOKE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER",
"ARCHIVE": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER"
},
"OPAQUE_DATA": {
"REKEY": "ALLOW_OWNER",
"REKEY_KEY_PAIR": "ALLOW_OWNER",
"DERIVE_KEY": "ALLOW_OWNER",
"LOCATE": "ALLOW_OWNER",
"CHECK": "ALLOW_OWNER",
"GET": "ALLOW_OWNER",
"GET_ATTRIBUTES": "ALLOW_OWNER",
"GET_ATTRIBUTE_LIST": "ALLOW_OWNER",
"ADD_ATTRIBUTE": "ALLOW_OWNER",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER",
"OBTAIN_LEASE": "ALLOW_OWNER",
"GET_USAGE_ALLOCATION": "ALLOW_OWNER",
"ACTIVATE": "ALLOW_OWNER",
"REVOKE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER",
"ARCHIVE": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER"
},
"PGP_KEY": {
"REKEY": "ALLOW_OWNER",
"REKEY_KEY_PAIR": "ALLOW_OWNER",
"DERIVE_KEY": "ALLOW_OWNER",
"LOCATE": "ALLOW_OWNER",
"CHECK": "ALLOW_OWNER",
"GET": "ALLOW_OWNER",
"GET_ATTRIBUTES": "ALLOW_OWNER",
"GET_ATTRIBUTE_LIST": "ALLOW_OWNER",
"ADD_ATTRIBUTE": "ALLOW_OWNER",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER",
"OBTAIN_LEASE": "ALLOW_OWNER",
"GET_USAGE_ALLOCATION": "ALLOW_OWNER",
"ACTIVATE": "ALLOW_OWNER",
"REVOKE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER",
"ARCHIVE": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER"
}
}
}

View File

@ -1,166 +1,168 @@
{ {
"example": { "example": {
"CERTIFICATE": { "default": {
"LOCATE": "ALLOW_ALL", "CERTIFICATE": {
"CHECK": "ALLOW_ALL", "LOCATE": "ALLOW_ALL",
"GET": "ALLOW_ALL", "CHECK": "ALLOW_ALL",
"GET_ATTRIBUTES": "ALLOW_ALL", "GET": "ALLOW_ALL",
"GET_ATTRIBUTE_LIST": "ALLOW_ALL", "GET_ATTRIBUTES": "ALLOW_ALL",
"ADD_ATTRIBUTE": "ALLOW_OWNER", "GET_ATTRIBUTE_LIST": "ALLOW_ALL",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER", "ADD_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER", "MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"OBTAIN_LEASE": "ALLOW_ALL", "DELETE_ATTRIBUTE": "ALLOW_OWNER",
"ACTIVATE": "ALLOW_OWNER", "OBTAIN_LEASE": "ALLOW_ALL",
"REVOKE": "ALLOW_OWNER", "ACTIVATE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER", "REVOKE": "ALLOW_OWNER",
"ARCHIVE": "ALLOW_OWNER", "DESTROY": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER" "ARCHIVE": "ALLOW_OWNER",
}, "RECOVER": "ALLOW_OWNER"
"SYMMETRIC_KEY": { },
"REKEY": "ALLOW_OWNER", "SYMMETRIC_KEY": {
"REKEY_KEY_PAIR": "ALLOW_OWNER", "REKEY": "ALLOW_OWNER",
"DERIVE_KEY": "ALLOW_OWNER", "REKEY_KEY_PAIR": "ALLOW_OWNER",
"LOCATE": "ALLOW_OWNER", "DERIVE_KEY": "ALLOW_OWNER",
"CHECK": "ALLOW_OWNER", "LOCATE": "ALLOW_OWNER",
"GET": "ALLOW_OWNER", "CHECK": "ALLOW_OWNER",
"GET_ATTRIBUTES": "ALLOW_OWNER", "GET": "ALLOW_OWNER",
"GET_ATTRIBUTE_LIST": "ALLOW_OWNER", "GET_ATTRIBUTES": "ALLOW_OWNER",
"ADD_ATTRIBUTE": "ALLOW_OWNER", "GET_ATTRIBUTE_LIST": "ALLOW_OWNER",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER", "ADD_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER", "MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"OBTAIN_LEASE": "ALLOW_OWNER", "DELETE_ATTRIBUTE": "ALLOW_OWNER",
"GET_USAGE_ALLOCATION": "ALLOW_OWNER", "OBTAIN_LEASE": "ALLOW_OWNER",
"ACTIVATE": "ALLOW_OWNER", "GET_USAGE_ALLOCATION": "ALLOW_OWNER",
"REVOKE": "ALLOW_OWNER", "ACTIVATE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER", "REVOKE": "ALLOW_OWNER",
"ARCHIVE": "ALLOW_OWNER", "DESTROY": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER" "ARCHIVE": "ALLOW_OWNER",
}, "RECOVER": "ALLOW_OWNER"
"PUBLIC_KEY": { },
"LOCATE": "ALLOW_ALL", "PUBLIC_KEY": {
"CHECK": "ALLOW_ALL", "LOCATE": "ALLOW_ALL",
"GET": "ALLOW_ALL", "CHECK": "ALLOW_ALL",
"GET_ATTRIBUTES": "ALLOW_ALL", "GET": "ALLOW_ALL",
"GET_ATTRIBUTE_LIST": "ALLOW_ALL", "GET_ATTRIBUTES": "ALLOW_ALL",
"ADD_ATTRIBUTE": "ALLOW_OWNER", "GET_ATTRIBUTE_LIST": "ALLOW_ALL",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER", "ADD_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER", "MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"OBTAIN_LEASE": "ALLOW_ALL", "DELETE_ATTRIBUTE": "ALLOW_OWNER",
"ACTIVATE": "ALLOW_OWNER", "OBTAIN_LEASE": "ALLOW_ALL",
"REVOKE": "ALLOW_OWNER", "ACTIVATE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER", "REVOKE": "ALLOW_OWNER",
"ARCHIVE": "ALLOW_OWNER", "DESTROY": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER" "ARCHIVE": "ALLOW_OWNER",
}, "RECOVER": "ALLOW_OWNER"
"PRIVATE_KEY": { },
"REKEY": "ALLOW_OWNER", "PRIVATE_KEY": {
"REKEY_KEY_PAIR": "ALLOW_OWNER", "REKEY": "ALLOW_OWNER",
"DERIVE_KEY": "ALLOW_OWNER", "REKEY_KEY_PAIR": "ALLOW_OWNER",
"LOCATE": "ALLOW_OWNER", "DERIVE_KEY": "ALLOW_OWNER",
"CHECK": "ALLOW_OWNER", "LOCATE": "ALLOW_OWNER",
"GET": "ALLOW_OWNER", "CHECK": "ALLOW_OWNER",
"GET_ATTRIBUTES": "ALLOW_OWNER", "GET": "ALLOW_OWNER",
"GET_ATTRIBUTE_LIST": "ALLOW_OWNER", "GET_ATTRIBUTES": "ALLOW_OWNER",
"ADD_ATTRIBUTE": "ALLOW_OWNER", "GET_ATTRIBUTE_LIST": "ALLOW_OWNER",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER", "ADD_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER", "MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"OBTAIN_LEASE": "ALLOW_OWNER", "DELETE_ATTRIBUTE": "ALLOW_OWNER",
"GET_USAGE_ALLOCATION": "ALLOW_OWNER", "OBTAIN_LEASE": "ALLOW_OWNER",
"ACTIVATE": "ALLOW_OWNER", "GET_USAGE_ALLOCATION": "ALLOW_OWNER",
"REVOKE": "ALLOW_OWNER", "ACTIVATE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER", "REVOKE": "ALLOW_OWNER",
"ARCHIVE": "ALLOW_OWNER", "DESTROY": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER" "ARCHIVE": "ALLOW_OWNER",
}, "RECOVER": "ALLOW_OWNER"
"SPLIT_KEY": { },
"REKEY": "ALLOW_OWNER", "SPLIT_KEY": {
"REKEY_KEY_PAIR": "ALLOW_OWNER", "REKEY": "ALLOW_OWNER",
"DERIVE_KEY": "ALLOW_OWNER", "REKEY_KEY_PAIR": "ALLOW_OWNER",
"LOCATE": "ALLOW_OWNER", "DERIVE_KEY": "ALLOW_OWNER",
"CHECK": "ALLOW_OWNER", "LOCATE": "ALLOW_OWNER",
"GET": "ALLOW_OWNER", "CHECK": "ALLOW_OWNER",
"GET_ATTRIBUTES": "ALLOW_OWNER", "GET": "ALLOW_OWNER",
"GET_ATTRIBUTE_LIST": "ALLOW_OWNER", "GET_ATTRIBUTES": "ALLOW_OWNER",
"ADD_ATTRIBUTE": "ALLOW_OWNER", "GET_ATTRIBUTE_LIST": "ALLOW_OWNER",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER", "ADD_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER", "MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"OBTAIN_LEASE": "ALLOW_OWNER", "DELETE_ATTRIBUTE": "ALLOW_OWNER",
"GET_USAGE_ALLOCATION": "ALLOW_OWNER", "OBTAIN_LEASE": "ALLOW_OWNER",
"ACTIVATE": "ALLOW_OWNER", "GET_USAGE_ALLOCATION": "ALLOW_OWNER",
"REVOKE": "ALLOW_OWNER", "ACTIVATE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER", "REVOKE": "ALLOW_OWNER",
"ARCHIVE": "ALLOW_OWNER", "DESTROY": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER" "ARCHIVE": "ALLOW_OWNER",
}, "RECOVER": "ALLOW_OWNER"
"TEMPLATE": { },
"LOCATE": "ALLOW_OWNER", "TEMPLATE": {
"GET": "ALLOW_OWNER", "LOCATE": "ALLOW_OWNER",
"GET_ATTRIBUTES": "ALLOW_OWNER", "GET": "ALLOW_OWNER",
"GET_ATTRIBUTE_LIST": "ALLOW_OWNER", "GET_ATTRIBUTES": "ALLOW_OWNER",
"ADD_ATTRIBUTE": "ALLOW_OWNER", "GET_ATTRIBUTE_LIST": "ALLOW_OWNER",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER", "ADD_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER", "MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER" "DELETE_ATTRIBUTE": "ALLOW_OWNER",
}, "DESTROY": "ALLOW_OWNER"
"SECRET_DATA": { },
"REKEY": "ALLOW_OWNER", "SECRET_DATA": {
"REKEY_KEY_PAIR": "ALLOW_OWNER", "REKEY": "ALLOW_OWNER",
"DERIVE_KEY": "ALLOW_OWNER", "REKEY_KEY_PAIR": "ALLOW_OWNER",
"LOCATE": "ALLOW_OWNER", "DERIVE_KEY": "ALLOW_OWNER",
"CHECK": "ALLOW_OWNER", "LOCATE": "ALLOW_OWNER",
"GET": "ALLOW_OWNER", "CHECK": "ALLOW_OWNER",
"GET_ATTRIBUTES": "ALLOW_OWNER", "GET": "ALLOW_OWNER",
"GET_ATTRIBUTE_LIST": "ALLOW_OWNER", "GET_ATTRIBUTES": "ALLOW_OWNER",
"ADD_ATTRIBUTE": "ALLOW_OWNER", "GET_ATTRIBUTE_LIST": "ALLOW_OWNER",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER", "ADD_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER", "MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"OBTAIN_LEASE": "ALLOW_OWNER", "DELETE_ATTRIBUTE": "ALLOW_OWNER",
"GET_USAGE_ALLOCATION": "ALLOW_OWNER", "OBTAIN_LEASE": "ALLOW_OWNER",
"ACTIVATE": "ALLOW_OWNER", "GET_USAGE_ALLOCATION": "ALLOW_OWNER",
"REVOKE": "ALLOW_OWNER", "ACTIVATE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER", "REVOKE": "ALLOW_OWNER",
"ARCHIVE": "ALLOW_OWNER", "DESTROY": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER" "ARCHIVE": "ALLOW_OWNER",
}, "RECOVER": "ALLOW_OWNER"
"OPAQUE_DATA": { },
"REKEY": "ALLOW_OWNER", "OPAQUE_DATA": {
"REKEY_KEY_PAIR": "ALLOW_OWNER", "REKEY": "ALLOW_OWNER",
"DERIVE_KEY": "ALLOW_OWNER", "REKEY_KEY_PAIR": "ALLOW_OWNER",
"LOCATE": "ALLOW_OWNER", "DERIVE_KEY": "ALLOW_OWNER",
"CHECK": "ALLOW_OWNER", "LOCATE": "ALLOW_OWNER",
"GET": "ALLOW_OWNER", "CHECK": "ALLOW_OWNER",
"GET_ATTRIBUTES": "ALLOW_OWNER", "GET": "ALLOW_OWNER",
"GET_ATTRIBUTE_LIST": "ALLOW_OWNER", "GET_ATTRIBUTES": "ALLOW_OWNER",
"ADD_ATTRIBUTE": "ALLOW_OWNER", "GET_ATTRIBUTE_LIST": "ALLOW_OWNER",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER", "ADD_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER", "MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"OBTAIN_LEASE": "ALLOW_OWNER", "DELETE_ATTRIBUTE": "ALLOW_OWNER",
"GET_USAGE_ALLOCATION": "ALLOW_OWNER", "OBTAIN_LEASE": "ALLOW_OWNER",
"ACTIVATE": "ALLOW_OWNER", "GET_USAGE_ALLOCATION": "ALLOW_OWNER",
"REVOKE": "ALLOW_OWNER", "ACTIVATE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER", "REVOKE": "ALLOW_OWNER",
"ARCHIVE": "ALLOW_OWNER", "DESTROY": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER" "ARCHIVE": "ALLOW_OWNER",
}, "RECOVER": "ALLOW_OWNER"
"PGP_KEY": { },
"REKEY": "ALLOW_OWNER", "PGP_KEY": {
"REKEY_KEY_PAIR": "ALLOW_OWNER", "REKEY": "ALLOW_OWNER",
"DERIVE_KEY": "ALLOW_OWNER", "REKEY_KEY_PAIR": "ALLOW_OWNER",
"LOCATE": "ALLOW_OWNER", "DERIVE_KEY": "ALLOW_OWNER",
"CHECK": "ALLOW_OWNER", "LOCATE": "ALLOW_OWNER",
"GET": "ALLOW_OWNER", "CHECK": "ALLOW_OWNER",
"GET_ATTRIBUTES": "ALLOW_OWNER", "GET": "ALLOW_OWNER",
"GET_ATTRIBUTE_LIST": "ALLOW_OWNER", "GET_ATTRIBUTES": "ALLOW_OWNER",
"ADD_ATTRIBUTE": "ALLOW_OWNER", "GET_ATTRIBUTE_LIST": "ALLOW_OWNER",
"MODIFY_ATTRIBUTE": "ALLOW_OWNER", "ADD_ATTRIBUTE": "ALLOW_OWNER",
"DELETE_ATTRIBUTE": "ALLOW_OWNER", "MODIFY_ATTRIBUTE": "ALLOW_OWNER",
"OBTAIN_LEASE": "ALLOW_OWNER", "DELETE_ATTRIBUTE": "ALLOW_OWNER",
"GET_USAGE_ALLOCATION": "ALLOW_OWNER", "OBTAIN_LEASE": "ALLOW_OWNER",
"ACTIVATE": "ALLOW_OWNER", "GET_USAGE_ALLOCATION": "ALLOW_OWNER",
"REVOKE": "ALLOW_OWNER", "ACTIVATE": "ALLOW_OWNER",
"DESTROY": "ALLOW_OWNER", "REVOKE": "ALLOW_OWNER",
"ARCHIVE": "ALLOW_OWNER", "DESTROY": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER" "ARCHIVE": "ALLOW_OWNER",
"RECOVER": "ALLOW_OWNER"
}
} }
} }
} }