// Allow Zincati to deploy, finalize, and cleanup a staged deployment through rpm-ostree.
polkit.addRule(function(action, subject) {
    if ((action.id == "org.projectatomic.rpmostree1.deploy" ||
         action.id == "org.projectatomic.rpmostree1.finalize-deployment") ||
         action.id == "org.projectatomic.rpmostree1.cleanup" &&
        subject.user == "zincati") {
        return polkit.Result.YES;
    }
});

// Allow Zincati to write dead-end release information as an MOTD fragment.
polkit.addRule(function(action, subject) {
    if (action.id == "org.coreos.zincati.deadend" &&  
        subject.user == "zincati") {
        return polkit.Result.YES;
    }
});