X-Git-Url: https://osm.etsi.org/gitweb/?a=blobdiff_plain;f=osm_nbi%2Froles_to_operations.yml;h=a97e0c1e6c5be8956810fe51f952b8631dac7075;hb=544a2ae8b0b950b55f29c3f0a223ffe4874285e5;hp=916f09ef9feada574d25366eff5377a678a8c227;hpb=701018c9f19c0d18b7392ab63686bb5f982e5ea5;p=osm%2FNBI.git

diff --git a/osm_nbi/roles_to_operations.yml b/osm_nbi/roles_to_operations.yml
index 916f09e..a97e0c1 100644
--- a/osm_nbi/roles_to_operations.yml
+++ b/osm_nbi/roles_to_operations.yml
@@ -53,6 +53,10 @@ roles:
 # NOTE 2: The default <OPERATION> tag can be overridden by using more specific tags
 #         with a different value.
 #
+# The 'force', 'public' and 'set_project' operation tags (respectively allowing/denying
+# the use of the query-strings FORCE, PUBLIC and SET_PROJECT), take by default the
+# value specified by the tag 'default' (false if not specified).
+#
 # The node <OPERATION> tag is defined by using an internal node of the tree, i.e.
 # "nsds", "users:id". A node <OPERATION> tag will affect all the nodes and leafs
 # beneath it. It can be used to override a default <OPERATION> tag.
@@ -82,6 +86,7 @@ roles:
     permissions:
         default:  false
         admin:    false
+        force:    true
         tokens:   true
         users:    true
         projects: true
@@ -89,52 +94,68 @@ roles:
 
   - name: "project_admin"
     permissions:
-        default: true
-        # Users
-        users:post:      false
-        users:id:patch:  false
-        users:id:delete: false
-        users:id:put:    false
-        # Projects
+        default:  true
+        admin:    false
         projects: false
-        # Roles
         roles:    false
+        # Users
+        users:          false
+        users:id:patch: true
 
   - name: "project_user"
     permissions:
-        default: true
-        # NS Instances
-        ns_instances: false
-        ns_instances:get: true
-        # VNF Instances
-        vnf_instances: false
+        default:     false
+        admin:       false
+        force:       false
+        public:      true
+        set_project: true
+        vnfds:    true
+        nsds:  true
+        slice_templates: true
+        ns_instances:    true
+        vnf_instances:   true
+        slice_instances: true
+        projects: false
+        roles:    false
         # Users
-        users: false
-        users:id:get: true
-        users:id:put: true
+        users:          false
         users:id:patch: true
-        # Projects
-        projects: false
         # VIMs
-        vims: false
-        vims:get: true
+        vims:        false
+        vims:get:    true
         vims:id:get: true
         # VIM Accounts
-        vim_accounts: false
-        vim_accounts:get: true
+        vim_accounts:        false
+        vim_accounts:get:    true
         vim_accounts:id:get: true
         # SDN Controllers
-        sdn_controllers: false
-        sdn_controllers:get: true
+        sdn_controllers:        false
+        sdn_controllers:get:    true
         sdn_controllers:id:get: true
-        # WIMs
-        wims: false
-        wims:get: true
-        wims:id:get: true
+        # K8s clusters
+        k8sclusters:        false
+        k8sclusters:get:    true
+        k8sclusters:id:get: true
+        # VCA
+        vca:        false
+        vca:get:    true
+        vca:id:get: true
+        # K8s repos
+        k8srepos:           true
+        # OSM repos
+        osmrepos:           true
         # WIM Accounts
-        wim_accounts: false
-        wim_accounts:get: true
+        wim_accounts:        false
+        wim_accounts:get:    true
         wim_accounts:id:get: true
+        # PDUs
+        pduds:        false
+        pduds:get:    true
+        pduds:id:get: true
+        # Alarms
+        alarms:        false
+        alarms:get:    true
+        alarms:id:get: true
 
   - name: "anonymous"
     permissions: