{"body":"(craton) ubuntu@ubuntu-xenial:~/craton/craton/common$ python t-policy-using-role-assignments.py \n{\n    \"fleet:audit\": \"(role:admin or (principal:%(principal)s and role_:%(role_)s and resource:%(resource)s))\"\n}\n(craton) ubuntu@ubuntu-xenial:~/craton/craton/common$ python policy.py \n{\n    \"example:my_file\": \"(role:compute_admin or project_id:%(project_id)s)\",\n    \"example:denied\": \"false:false\",\n    \"true\": \"\",\n    \"example:allowed\": \"\",\n    \"example:early_and_fail\": \"(false:false and rule:true)\",\n    \"example:lowercase_admin\": \"(role:admin or role:sysadmin)\",\n    \"example:uppercase_admin\": \"(role:ADMIN or role:sysadmin)\",\n    \"example:early_or_success\": \"(rule:true or false:false)\",\n    \"example:get_http\": \"http:http://www.example.com\"\n}\nTraceback (most recent call last):\n  File \"policy.py\", line 53, in <module>\n    ENFORCER.enforce(lowercase_action, target, credentials, do_raise=True)\n  File \"/home/ubuntu/craton/lib/python3.5/site-packages/oslo_policy/policy.py\", line 735, in enforce\n    raise PolicyNotAuthorized(rule, target, creds)\noslo_policy.policy.PolicyNotAuthorized: {} is disallowed by policy rule example:lowercase_admin with {} ","name":"","extension":"txt","url":"https://www.irccloud.com/pastebin/MjfyuUtB","modified":1483983931,"id":"MjfyuUtB","size":1154,"lines":22,"own_paste":false,"theme":"","date":1483983931}