package org.zstack.header.cluster;

import org.zstack.header.identity.rbac.RBACDescription;

public class RBACInfo implements RBACDescription {
    @Override
    public void permissions() {
        permissionBuilder()
                .adminOnlyAPIs("org.zstack.header.cluster.**")
                .build();
    }

    @Override
    public void contributeToRoles() {
    }

    @Override
    public void roles() {

    }

    @Override
    public void globalReadableResources() {
        globalReadableResourceBuilder()
                .resources(ClusterVO.class)
                .build();
    }
}

@@ -274,16 +274,70 @@
 er.**%22)%0A
+                .normalAPIs(APIQueryClusterMsg.class)%0A
         
@@ -409,24 +409,169 @@
 ToRoles() %7B%0A
+        roleContributorBuilder()%0A                .roleName(%22other%22)%0A                .actions(APIQueryClusterMsg.class)%0A                .build();%0A
     %7D%0A%0A    @

allow normal account to query cluster