Jump to: navigation, search

Difference between revisions of "PolicyDatabase"

(Policy Relational Database Schema for Openstack)
(Policy Relational Database Schema for Openstack)
Line 16: Line 16:
 
The following figure presents the database schema to store security policies in Openstack.
 
The following figure presents the database schema to store security policies in Openstack.
  
<figure1>
+
[[File:Openstack policydb.png|thumbnail|center|Policy Database Schema]]

Revision as of 14:22, 25 February 2015

Policy Relational Database Schema for Openstack

Overview

This document describes a relational database schema that stores security policies for Openstack. This schema reflects the current policy engine rules, stored in policy.json files.

Supported Operations

Policies stored in the database will support CRUD operations on policies, and also complex SQL queries, for instance, to find out which are the necessary conditions to perform a given action.

Besides these, two operations will also be supported:

  • Import policy.json file into the database: In this operation, policies conflicts will be eliminated. Duplicate rules will also be removed.
  • Export policies from database to new policy.json files. These new files will reflect the managed set of rules.

Database Schema

The following figure presents the database schema to store security policies in Openstack.

File:Openstack policydb.png
Policy Database Schema