recipe -> operation
added response example
Will cherry pick to frankfurt.
Issue-ID: POLICY-2656
Change-Id: Ia0e5c75d29edcecce54709f3659d3cd8f5bcfd15
Signed-off-by: Pamela Dragosh <pdragosh@research.att.com>
(cherry picked from commit
9a89058def115a2f5ec62bca719697d7bc738ece)
"resource": {
"guard": {
"actor": "SO",
- "recipe": "VF Module Create",
+ "operation": "VF Module Create",
"clname": "ControlLoop-vDNS-6f37f56d-a87d-4b85-b6a9-cc953cf779b3",
"target": "vLoadBalancer-00",
"vfCount": "1"
--- /dev/null
+{"status":"Permit"}
\ No newline at end of file
.. literalinclude:: decision.guard.json
:language: JSON
+The return decision simply has "permit" or "deny" in the response to tell the calling application whether they are allowed to perform the operation.
+
+.. literalinclude:: decision.guard.response.json
+ :language: JSON
+
.. _xacml-optimization-label:
Optimization Policy Types