{
    "context_is_admin":  "role:admin",
    "admin_only": "rule:context_is_admin",
    "admin_or_owner": "rule:context_is_admin or tenant_id:%(tenant_id)s",

    "create_bgpvpn": "rule:admin_only",

    "get_bgpvpn": "rule:admin_or_owner",
    "get_bgpvpn:tenant_id": "rule:admin_only",
    "get_bgpvpn:route_targets": "rule:admin_only",
    "get_bgpvpn:import_targets": "rule:admin_only",
    "get_bgpvpn:export_targets": "rule:admin_only",
    "get_bgpvpn:route_distinguishers": "rule:admin_only",

    "update_bgpvpn": "rule:admin_or_owner",
    "update_bgpvpn:tenant_id": "rule:admin_only",
    "update_bgpvpn:route_targets": "rule:admin_only",
    "update_bgpvpn:import_targets": "rule:admin_only",
    "update_bgpvpn:export_targets": "rule:admin_only",
    "update_bgpvpn:route_distinguishers": "rule:admin_only",

    "delete_bgpvpn": "rule:admin_only",

    "create_bgpvpn_network_association": "rule:admin_or_owner",
    "get_bgpvpn_network_association": "rule:admin_or_owner",
    "get_bgpvpn_network_association:tenant_id": "rule:admin_only",
    "get_bgpvpn_network_associations": "rule:admin_or_owner",
    "update_bgpvpn_network_association": "rule:admin_or_owner",
    "delete_bgpvpn_network_association": "rule:admin_or_owner",

    "create_bgpvpn_router_association": "rule:admin_or_owner",
    "get_bgpvpn_router_association": "rule:admin_or_owner",
    "get_bgpvpn_router_association:tenant_id": "rule:admin_only",
    "get_bgpvpn_router_associations": "rule:admin_or_owner",
    "update_bgpvpn_router_association": "rule:admin_or_owner",
    "delete_bgpvpn_router_association": "rule:admin_or_owner",

    "create_bgpvpn_port_association": "rule:admin_or_owner",
    "get_bgpvpn_port_association": "rule:admin_or_owner",
    "get_bgpvpn_port_association:tenant_id": "rule:admin_only",
    "get_bgpvpn_port_associations": "rule:admin_or_owner",
    "update_bgpvpn_port_association": "rule:admin_or_owner",
    "delete_bgpvpn_port_association": "rule:admin_or_owner"
}
