PolicyDatabase
Contents
Policy Relational Database Schema for Openstack
Overview
This document describes a relational database schema that stores security policies for Openstack. This schema reflects the current policy engine rules, stored in policy.json files.
Supported Operations
Policies stored in the database will support CRUD operations on policies, and also complex SQL queries, for instance, to find out which are the necessary conditions to perform a given action.
Besides these, two operations will also be supported:
- Import policy.json file into the database: In this operation, policies conflicts will be eliminated. Duplicate rules will also be removed.
- Export policies from database to new policy.json files. These new files will reflect the managed set of rules.
Database Schema
The following figure presents the database schema to store security policies in Openstack.
