# Copyright (c) 2016 The Johns Hopkins University/Applied Physics Laboratory
# All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
#    http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.

from kmip.core import enums


policies = {
    'default': {
        enums.ObjectType.CERTIFICATE: {
            enums.Operation.LOCATE:             enums.Policy.ALLOW_ALL,
            enums.Operation.CHECK:              enums.Policy.ALLOW_ALL,
            enums.Operation.GET:                enums.Policy.ALLOW_ALL,
            enums.Operation.GET_ATTRIBUTES:     enums.Policy.ALLOW_ALL,
            enums.Operation.GET_ATTRIBUTE_LIST: enums.Policy.ALLOW_ALL,
            enums.Operation.ADD_ATTRIBUTE:      enums.Policy.ALLOW_OWNER,
            enums.Operation.MODIFY_ATTRIBUTE:   enums.Policy.ALLOW_OWNER,
            enums.Operation.DELETE_ATTRIBUTE:   enums.Policy.ALLOW_OWNER,
            enums.Operation.OBTAIN_LEASE:       enums.Policy.ALLOW_ALL,
            enums.Operation.ACTIVATE:           enums.Policy.ALLOW_OWNER,
            enums.Operation.REVOKE:             enums.Policy.ALLOW_OWNER,
            enums.Operation.DESTROY:            enums.Policy.ALLOW_OWNER,
            enums.Operation.ARCHIVE:            enums.Policy.ALLOW_OWNER,
            enums.Operation.RECOVER:            enums.Policy.ALLOW_OWNER
        },
        enums.ObjectType.SYMMETRIC_KEY: {
            enums.Operation.REKEY:                enums.Policy.ALLOW_OWNER,
            enums.Operation.REKEY_KEY_PAIR:       enums.Policy.ALLOW_OWNER,
            enums.Operation.DERIVE_KEY:           enums.Policy.ALLOW_OWNER,
            enums.Operation.LOCATE:               enums.Policy.ALLOW_OWNER,
            enums.Operation.CHECK:                enums.Policy.ALLOW_OWNER,
            enums.Operation.GET:                  enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_ATTRIBUTES:       enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_ATTRIBUTE_LIST:   enums.Policy.ALLOW_OWNER,
            enums.Operation.ADD_ATTRIBUTE:        enums.Policy.ALLOW_OWNER,
            enums.Operation.MODIFY_ATTRIBUTE:     enums.Policy.ALLOW_OWNER,
            enums.Operation.DELETE_ATTRIBUTE:     enums.Policy.ALLOW_OWNER,
            enums.Operation.OBTAIN_LEASE:         enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_USAGE_ALLOCATION: enums.Policy.ALLOW_OWNER,
            enums.Operation.ACTIVATE:             enums.Policy.ALLOW_OWNER,
            enums.Operation.REVOKE:               enums.Policy.ALLOW_OWNER,
            enums.Operation.DESTROY:              enums.Policy.ALLOW_OWNER,
            enums.Operation.ARCHIVE:              enums.Policy.ALLOW_OWNER,
            enums.Operation.RECOVER:              enums.Policy.ALLOW_OWNER
        },
        enums.ObjectType.PUBLIC_KEY: {
            enums.Operation.LOCATE:             enums.Policy.ALLOW_ALL,
            enums.Operation.CHECK:              enums.Policy.ALLOW_ALL,
            enums.Operation.GET:                enums.Policy.ALLOW_ALL,
            enums.Operation.GET_ATTRIBUTES:     enums.Policy.ALLOW_ALL,
            enums.Operation.GET_ATTRIBUTE_LIST: enums.Policy.ALLOW_ALL,
            enums.Operation.ADD_ATTRIBUTE:      enums.Policy.ALLOW_OWNER,
            enums.Operation.MODIFY_ATTRIBUTE:   enums.Policy.ALLOW_OWNER,
            enums.Operation.DELETE_ATTRIBUTE:   enums.Policy.ALLOW_OWNER,
            enums.Operation.OBTAIN_LEASE:       enums.Policy.ALLOW_ALL,
            enums.Operation.ACTIVATE:           enums.Policy.ALLOW_OWNER,
            enums.Operation.REVOKE:             enums.Policy.ALLOW_OWNER,
            enums.Operation.DESTROY:            enums.Policy.ALLOW_OWNER,
            enums.Operation.ARCHIVE:            enums.Policy.ALLOW_OWNER,
            enums.Operation.RECOVER:            enums.Policy.ALLOW_OWNER
        },
        enums.ObjectType.PRIVATE_KEY: {
            enums.Operation.REKEY:                enums.Policy.ALLOW_OWNER,
            enums.Operation.REKEY_KEY_PAIR:       enums.Policy.ALLOW_OWNER,
            enums.Operation.DERIVE_KEY:           enums.Policy.ALLOW_OWNER,
            enums.Operation.LOCATE:               enums.Policy.ALLOW_OWNER,
            enums.Operation.CHECK:                enums.Policy.ALLOW_OWNER,
            enums.Operation.GET:                  enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_ATTRIBUTES:       enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_ATTRIBUTE_LIST:   enums.Policy.ALLOW_OWNER,
            enums.Operation.ADD_ATTRIBUTE:        enums.Policy.ALLOW_OWNER,
            enums.Operation.MODIFY_ATTRIBUTE:     enums.Policy.ALLOW_OWNER,
            enums.Operation.DELETE_ATTRIBUTE:     enums.Policy.ALLOW_OWNER,
            enums.Operation.OBTAIN_LEASE:         enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_USAGE_ALLOCATION: enums.Policy.ALLOW_OWNER,
            enums.Operation.ACTIVATE:             enums.Policy.ALLOW_OWNER,
            enums.Operation.REVOKE:               enums.Policy.ALLOW_OWNER,
            enums.Operation.DESTROY:              enums.Policy.ALLOW_OWNER,
            enums.Operation.ARCHIVE:              enums.Policy.ALLOW_OWNER,
            enums.Operation.RECOVER:              enums.Policy.ALLOW_OWNER
        },
        enums.ObjectType.SPLIT_KEY: {
            enums.Operation.REKEY:                enums.Policy.ALLOW_OWNER,
            enums.Operation.REKEY_KEY_PAIR:       enums.Policy.ALLOW_OWNER,
            enums.Operation.DERIVE_KEY:           enums.Policy.ALLOW_OWNER,
            enums.Operation.LOCATE:               enums.Policy.ALLOW_OWNER,
            enums.Operation.CHECK:                enums.Policy.ALLOW_OWNER,
            enums.Operation.GET:                  enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_ATTRIBUTES:       enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_ATTRIBUTE_LIST:   enums.Policy.ALLOW_OWNER,
            enums.Operation.ADD_ATTRIBUTE:        enums.Policy.ALLOW_OWNER,
            enums.Operation.MODIFY_ATTRIBUTE:     enums.Policy.ALLOW_OWNER,
            enums.Operation.DELETE_ATTRIBUTE:     enums.Policy.ALLOW_OWNER,
            enums.Operation.OBTAIN_LEASE:         enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_USAGE_ALLOCATION: enums.Policy.ALLOW_OWNER,
            enums.Operation.ACTIVATE:             enums.Policy.ALLOW_OWNER,
            enums.Operation.REVOKE:               enums.Policy.ALLOW_OWNER,
            enums.Operation.DESTROY:              enums.Policy.ALLOW_OWNER,
            enums.Operation.ARCHIVE:              enums.Policy.ALLOW_OWNER,
            enums.Operation.RECOVER:              enums.Policy.ALLOW_OWNER
        },
        enums.ObjectType.TEMPLATE: {
            enums.Operation.LOCATE:             enums.Policy.ALLOW_OWNER,
            enums.Operation.GET:                enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_ATTRIBUTES:     enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_ATTRIBUTE_LIST: enums.Policy.ALLOW_OWNER,
            enums.Operation.ADD_ATTRIBUTE:      enums.Policy.ALLOW_OWNER,
            enums.Operation.MODIFY_ATTRIBUTE:   enums.Policy.ALLOW_OWNER,
            enums.Operation.DELETE_ATTRIBUTE:   enums.Policy.ALLOW_OWNER,
            enums.Operation.DESTROY:            enums.Policy.ALLOW_OWNER
        },
        enums.ObjectType.SECRET_DATA: {
            enums.Operation.REKEY:                enums.Policy.ALLOW_OWNER,
            enums.Operation.REKEY_KEY_PAIR:       enums.Policy.ALLOW_OWNER,
            enums.Operation.DERIVE_KEY:           enums.Policy.ALLOW_OWNER,
            enums.Operation.LOCATE:               enums.Policy.ALLOW_OWNER,
            enums.Operation.CHECK:                enums.Policy.ALLOW_OWNER,
            enums.Operation.GET:                  enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_ATTRIBUTES:       enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_ATTRIBUTE_LIST:   enums.Policy.ALLOW_OWNER,
            enums.Operation.ADD_ATTRIBUTE:        enums.Policy.ALLOW_OWNER,
            enums.Operation.MODIFY_ATTRIBUTE:     enums.Policy.ALLOW_OWNER,
            enums.Operation.DELETE_ATTRIBUTE:     enums.Policy.ALLOW_OWNER,
            enums.Operation.OBTAIN_LEASE:         enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_USAGE_ALLOCATION: enums.Policy.ALLOW_OWNER,
            enums.Operation.ACTIVATE:             enums.Policy.ALLOW_OWNER,
            enums.Operation.REVOKE:               enums.Policy.ALLOW_OWNER,
            enums.Operation.DESTROY:              enums.Policy.ALLOW_OWNER,
            enums.Operation.ARCHIVE:              enums.Policy.ALLOW_OWNER,
            enums.Operation.RECOVER:              enums.Policy.ALLOW_OWNER
        },
        enums.ObjectType.OPAQUE_DATA: {
            enums.Operation.REKEY:                enums.Policy.ALLOW_OWNER,
            enums.Operation.REKEY_KEY_PAIR:       enums.Policy.ALLOW_OWNER,
            enums.Operation.DERIVE_KEY:           enums.Policy.ALLOW_OWNER,
            enums.Operation.LOCATE:               enums.Policy.ALLOW_OWNER,
            enums.Operation.CHECK:                enums.Policy.ALLOW_OWNER,
            enums.Operation.GET:                  enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_ATTRIBUTES:       enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_ATTRIBUTE_LIST:   enums.Policy.ALLOW_OWNER,
            enums.Operation.ADD_ATTRIBUTE:        enums.Policy.ALLOW_OWNER,
            enums.Operation.MODIFY_ATTRIBUTE:     enums.Policy.ALLOW_OWNER,
            enums.Operation.DELETE_ATTRIBUTE:     enums.Policy.ALLOW_OWNER,
            enums.Operation.OBTAIN_LEASE:         enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_USAGE_ALLOCATION: enums.Policy.ALLOW_OWNER,
            enums.Operation.ACTIVATE:             enums.Policy.ALLOW_OWNER,
            enums.Operation.REVOKE:               enums.Policy.ALLOW_OWNER,
            enums.Operation.DESTROY:              enums.Policy.ALLOW_OWNER,
            enums.Operation.ARCHIVE:              enums.Policy.ALLOW_OWNER,
            enums.Operation.RECOVER:              enums.Policy.ALLOW_OWNER
        },
        enums.ObjectType.PGP_KEY: {
            enums.Operation.REKEY:                enums.Policy.ALLOW_OWNER,
            enums.Operation.REKEY_KEY_PAIR:       enums.Policy.ALLOW_OWNER,
            enums.Operation.DERIVE_KEY:           enums.Policy.ALLOW_OWNER,
            enums.Operation.LOCATE:               enums.Policy.ALLOW_OWNER,
            enums.Operation.CHECK:                enums.Policy.ALLOW_OWNER,
            enums.Operation.GET:                  enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_ATTRIBUTES:       enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_ATTRIBUTE_LIST:   enums.Policy.ALLOW_OWNER,
            enums.Operation.ADD_ATTRIBUTE:        enums.Policy.ALLOW_OWNER,
            enums.Operation.MODIFY_ATTRIBUTE:     enums.Policy.ALLOW_OWNER,
            enums.Operation.DELETE_ATTRIBUTE:     enums.Policy.ALLOW_OWNER,
            enums.Operation.OBTAIN_LEASE:         enums.Policy.ALLOW_OWNER,
            enums.Operation.GET_USAGE_ALLOCATION: enums.Policy.ALLOW_OWNER,
            enums.Operation.ACTIVATE:             enums.Policy.ALLOW_OWNER,
            enums.Operation.REVOKE:               enums.Policy.ALLOW_OWNER,
            enums.Operation.DESTROY:              enums.Policy.ALLOW_OWNER,
            enums.Operation.ARCHIVE:              enums.Policy.ALLOW_OWNER,
            enums.Operation.RECOVER:              enums.Policy.ALLOW_OWNER
        }
    },
    'public': {
        enums.ObjectType.TEMPLATE: {
            enums.Operation.LOCATE:             enums.Policy.ALLOW_ALL,
            enums.Operation.GET:                enums.Policy.ALLOW_ALL,
            enums.Operation.GET_ATTRIBUTES:     enums.Policy.ALLOW_ALL,
            enums.Operation.GET_ATTRIBUTE_LIST: enums.Policy.ALLOW_ALL,
            enums.Operation.ADD_ATTRIBUTE:      enums.Policy.DISALLOW_ALL,
            enums.Operation.MODIFY_ATTRIBUTE:   enums.Policy.DISALLOW_ALL,
            enums.Operation.DELETE_ATTRIBUTE:   enums.Policy.DISALLOW_ALL,
            enums.Operation.DESTROY:            enums.Policy.DISALLOW_ALL
        }
    }
}