Add MANO roles for projects

[osm/SO.git] / models / plugins / yang / project-nsd.role.xml

diff --git a/models/plugins/yang/project-nsd.role.xml b/models/plugins/yang/project-nsd.role.xml
index 1d52f77..afacae3 100644 (file)
--- a/models/plugins/yang/project-nsd.role.xml
+++ b/models/plugins/yang/project-nsd.role.xml
@@ -1,8 +1,15 @@
 <?xml version="1.0" ?>
 <config xmlns="http://riftio.com/ns/riftware-1.0/rw-rbac-role-def">
+  <key-definition>
+    <role>rw-project-mano:project-nsd-role</role>
+    <key-set>
+      <name>project-name</name>
+    </key-set>
+  </key-definition>
+
   <role-definition>
     <role>rw-project-mano:catalog-oper</role>
-    <keys-role>rw-project:project-role</keys-role>
+    <keys-role>rw-project-mano:project-nsd-role</keys-role>
     <authorize>
       <permissions>read execute</permissions>
       <path>/rw-project:project/project-nsd:nsd-catalog</path>
@@ -11,10 +18,19 @@
 
   <role-definition>
     <role>rw-project-mano:catalog-admin</role>
-    <keys-role>rw-project:project-role</keys-role>
+    <keys-role>rw-project-mano:project-nsd-role</keys-role>
     <authorize>
       <permissions>create read update delete execute</permissions>
       <path>/rw-project:project/project-nsd:nsd-catalog</path>
     </authorize>
   </role-definition>
+
+  <role-definition>
+    <role>rw-project-mano:lcm-admin</role>
+    <keys-role>rw-project-mano:project-nsd-role</keys-role>
+    <authorize>
+      <permissions>read execute</permissions>
+      <path>/rw-project:project/project-nsd:nsd-catalog</path>
+    </authorize>
+  </role-definition>
 </config>