projects
/
osm
/
NBI.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
change MANIFEST.in to remove tests from package
[osm/NBI.git]
/
osm_nbi
/
roles_to_operations.yml
diff --git
a/osm_nbi/roles_to_operations.yml
b/osm_nbi/roles_to_operations.yml
index
916f09e
..
57db10e
100644
(file)
--- a/
osm_nbi/roles_to_operations.yml
+++ b/
osm_nbi/roles_to_operations.yml
@@
-53,6
+53,10
@@
roles:
# NOTE 2: The default <OPERATION> tag can be overridden by using more specific tags
# with a different value.
#
# NOTE 2: The default <OPERATION> tag can be overridden by using more specific tags
# with a different value.
#
+# The 'force', 'public' and 'set_project' operation tags (respectively allowing/denying
+# the use of the query-strings FORCE, PUBLIC and SET_PROJECT), take by default the
+# value specified by the tag 'default' (false if not specified).
+#
# The node <OPERATION> tag is defined by using an internal node of the tree, i.e.
# "nsds", "users:id". A node <OPERATION> tag will affect all the nodes and leafs
# beneath it. It can be used to override a default <OPERATION> tag.
# The node <OPERATION> tag is defined by using an internal node of the tree, i.e.
# "nsds", "users:id". A node <OPERATION> tag will affect all the nodes and leafs
# beneath it. It can be used to override a default <OPERATION> tag.
@@
-82,6
+86,7
@@
roles:
permissions:
default: false
admin: false
permissions:
default: false
admin: false
+ force: true
tokens: true
users: true
projects: true
tokens: true
users: true
projects: true
@@
-89,52
+94,56
@@
roles:
- name: "project_admin"
permissions:
- name: "project_admin"
permissions:
- default: true
- # Users
- users:post: false
- users:id:patch: false
- users:id:delete: false
- users:id:put: false
- # Projects
+ default: true
+ admin: false
+ users: false
projects: false
projects: false
- # Roles
roles: false
- name: "project_user"
permissions:
roles: false
- name: "project_user"
permissions:
- default:
tru
e
- # NS Instances
-
ns_instances:
false
-
ns_instances:get:
true
- # VNF Instances
- vnf
_instances: fals
e
- # Users
-
users: fals
e
-
users:id:get:
true
-
users:id:put:
true
-
users:id:patch
: true
- # Projects
+ default:
fals
e
+ admin: false
+
force:
false
+
public:
true
+ set_project: true
+ vnf
ds: tru
e
+ nsds: true
+
slice_templates: tru
e
+
ns_instances:
true
+
vnf_instances:
true
+
slice_instances
: true
+ users: false
projects: false
projects: false
+ roles: false
# VIMs
# VIMs
- vims: false
- vims:get: true
+ vims:
false
+ vims:get:
true
vims:id:get: true
# VIM Accounts
vims:id:get: true
# VIM Accounts
- vim_accounts: false
- vim_accounts:get: true
+ vim_accounts:
false
+ vim_accounts:get:
true
vim_accounts:id:get: true
# SDN Controllers
vim_accounts:id:get: true
# SDN Controllers
- sdn_controllers: false
- sdn_controllers:get: true
+ sdn_controllers:
false
+ sdn_controllers:get:
true
sdn_controllers:id:get: true
sdn_controllers:id:get: true
- # WIMs
- wims: false
- wims:get: true
- wims:id:get: true
+ # K8s clusters
+ k8sclusters: false
+ k8sclusters:get: true
+ k8sclusters:id:get: true
+ # K8s repos
+ k8srepos: true
+ # OSM repos
+ osmrepos: true
# WIM Accounts
# WIM Accounts
- wim_accounts: false
- wim_accounts:get: true
+ wim_accounts:
false
+ wim_accounts:get:
true
wim_accounts:id:get: true
wim_accounts:id:get: true
+ # PDUs
+ pduds: false
+ pduds:get: true
+ pduds:id:get: true
- name: "anonymous"
permissions:
- name: "anonymous"
permissions: