drydock and policies
ActivePublic
Actions

Authored by hach-que on Nov 23 2013, 4:26 AM.

Tags

None

Referenced Files

	F84247: drydock_and_policies
	Nov 23 2013, 4:26 AM

Subscribers

None

	drydock

	- blueprints
	- resources
	- leases


	- blueprint
	- view policy
	- ability to view blueprints and the resources they have created (and the leases on the resources)
	- resource policy
	- ability to create resources from blueprints
	- resource
	- view policy
	- ability to view resource and the leases on that resource
	- lease policy
	- ability to create leases on a particular resource
	- release policy
	- ability to release this resource
	- lease
	- view policy
	- ability to view lease
	- release policy
	- ability to release lease


	- lease view policy has automatic capabilities for anyone who can view the resource
	- resource view policy has automatic capabilities for anyone who can view the blueprint
	- lease release policy has automatic capabilities for anyone who can release the resource

if a user manually kicks off a build, then they're considered to the user when evaluating policies around drydock
if a global herald rule kicks off a build, then omnipotent is when evaluating drydock policies
if a personal herald rule kicks off a build (which we don't allow yet), then the owner of the herald rule is the user when evaluating policies

drydock and policiesActivePublicActions