# keystone.policy.backends.rules module

Policy engine for keystone.

class keystone.policy.backends.rules.Policy

  Bases: `PolicyDriverBase`

  create_policy(policy_id, policy)

    Store a policy blob.

    Raises:

      keystone.exception.Conflict – If a duplicate policy exists.

  delete_policy(policy_id)

    Remove a policy blob.

    Raises:

      keystone.exception.PolicyNotFound – If the policy doesn’t exist.

  enforce(credentials, action, target)

    Verify that a user is authorized to perform action.

    For more information on a full implementation of this see: keystone.policy.backends.rules.Policy.enforce

  get_policy(policy_id)

    Retrieve a specific policy blob.

    Raises:

      keystone.exception.PolicyNotFound – If the policy doesn’t exist.

  list_policies()

    List all policies.

  update_policy(policy_id, policy)

    Update a policy blob.

    Raises:

      keystone.exception.PolicyNotFound – If the policy doesn’t exist.

this page last updated: 2026-06-11 21:50:20

Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.

found an error? report a bug