<!DOCTYPE busconfig PUBLIC
	  "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
	  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">

<busconfig>

	<!-- Only root can own ricci service. -->
	<policy user="root">
		<allow own="com.redhat.ricci"/>
	</policy>

	<!-- Allow anyone to call modrpm_rw and modrpm_ro
	     methods.  oddjobd performs actual ACL. -->
	<policy context="default">
		<allow send_destination="com.redhat.ricci"
		       send_path="/com/redhat/ricci"
		       send_interface="com.redhat.ricci"
		       send_member="modrpm_rw"/>
		<allow send_destination="com.redhat.ricci"
		       send_path="/com/redhat/ricci"
		       send_interface="com.redhat.ricci"
		       send_member="modrpm_ro"/>
	</policy>

</busconfig>