gistfile1.txt

{
    "admin_required": [["role:admin"], ["is_admin:1"]],
    "owner" : [["user_id:%(user_id)s"]],
    "admin_or_owner": [["rule:admin_required"], ["rule:owner"]],

    "default": [["rule:admin_required"]],

    "identity:get_service": [["rule:admin_required"]],
    "identity:list_services": [["rule:admin_required"]],
    "identity:create_service": [["rule:admin_required"]],
    "identity:update_service": [["rule:admin_required"]],
    "identity:delete_service": [["rule:admin_required"]],

    "identity:get_endpoint": [["rule:admin_required"]],
    "identity:list_endpoints": [["rule:admin_required"]],
    "identity:create_endpoint": [["rule:admin_required"]],
    "identity:update_endpoint": [["rule:admin_required"]],
    "identity:delete_endpoint": [["rule:admin_required"]],

    "identity:get_domain": [["rule:admin_required"]],
    "identity:list_domains": [["rule:admin_required"]],
    "identity:create_domain": [["rule:admin_required"]],
    "identity:update_domain": [["rule:admin_required"]],
    "identity:delete_domain": [["rule:admin_required"]],

    "identity:get_project": [["rule:admin_required"]],
    "identity:list_projects": [["rule:admin_required"]],
    "identity:list_user_projects": [["rule:admin_or_owner"]],
    "identity:create_project": [["rule:admin_or_owner"]],
    "identity:update_project": [["rule:admin_required"]],
    "identity:delete_project": [["rule:admin_required"]],