From d2fa031a5ce4351564d77a4f037960ab4ec9e348 Mon Sep 17 00:00:00 2001
From: Qiu Jian <qiujian@yunionyun.com>
Date: Sat, 16 Apr 2022 02:32:12 +0800
Subject: [PATCH] fix permission 20220416

---
 pkg/keystone/locale/predefined_policies.go | 13 +++++++++++--
 pkg/keystone/locale/predefined_yaml.go     | 12 ++++++++----
 2 files changed, 19 insertions(+), 6 deletions(-)

diff --git a/pkg/keystone/locale/predefined_policies.go b/pkg/keystone/locale/predefined_policies.go
index 24057c1a8d..e0195502e4 100644
--- a/pkg/keystone/locale/predefined_policies.go
+++ b/pkg/keystone/locale/predefined_policies.go
@@ -152,9 +152,18 @@ var (
 						"list",
 					},
 				},
-				"log": {
-					"actions": {
+				"notify": {
+					"notifications": {
 						"list",
+						"get",
+					},
+					"robots": {
+						"list",
+						"get",
+					},
+					"receivers": {
+						"list",
+						"get",
 					},
 				},
 				"devtool": {
diff --git a/pkg/keystone/locale/predefined_yaml.go b/pkg/keystone/locale/predefined_yaml.go
index 5c3bf5248d..7ec030a5bb 100644
--- a/pkg/keystone/locale/predefined_yaml.go
+++ b/pkg/keystone/locale/predefined_yaml.go
@@ -113,6 +113,11 @@ policy:
       '*': deny
     '*':
       '*': allow
+  notify:
+    events:
+      '*': deny
+    '*':
+      '*': allow
   identity:
     events:
       '*': deny
@@ -132,8 +137,9 @@ policy:
         purge: allow
   log:
     actions:
-      list: deny
-      get: deny
+      list:
+        '*': allow
+        splitable: deny
   yunionconf:
     '*':
       '*': allow
@@ -154,8 +160,6 @@ policy:
   identity:
     '*':
       '*': deny
-      get: allow
-      list: allow
 `
 
 var normalUserPolicy = `