common/plugins/yang/rw-ro-account.role.xml

   1 <?xml version="1.0" ?>
   2 <config xmlns="http://riftio.com/ns/riftware-1.0/rw-rbac-role-def">
   3   <key-definition>
   4     <role>rw-project-mano:rw-ro-account-role</role>
   5     <key-set>
   6       <name>project-name</name>
   7       <path>/rw-project:project/rw-project:name</path>
   8       <path>/rw-ro-account:update-ro-account-status/rw-ro-account:project-name</path>
   9     </key-set>
  10   </key-definition>
  11
  12   <role-definition>
  13     <role>rw-project-mano:account-oper</role>
  14     <keys-role>rw-project-mano:rw-ro-account-role</keys-role>
  15     <priority>
  16       <lower-than>
  17         <role>rw-project:project-admin</role>
  18       </lower-than>
  19     </priority>
  20     <authorize>
  21       <permissions>read execute</permissions>
  22       <path>/rw-project:project/rw-ro-account:ro-account</path>
  23       <path>/rw-project:project/rw-ro-account:ro-account-state</path>
  24     </authorize>
  25   </role-definition>
  26
  27   <role-definition>
  28     <role>rw-project-mano:account-admin</role>
  29     <keys-role>rw-project-mano:rw-ro-account-role</keys-role>
  30     <priority>
  31       <higher-than>
  32         <role>rw-project-mano:account-oper</role>
  33       </higher-than>
  34       <higher-than>
  35         <role>rw-project-mano:lcm-oper</role>
  36       </higher-than>
  37       <higher-than>
  38         <role>rw-project-mano:catalog-oper</role>
  39       </higher-than>
  40       <higher-than>
  41         <role>rw-project:project-oper</role>
  42       </higher-than>
  43       <higher-than>
  44         <role>rw-project-mano:lcm-admin</role>
  45       </higher-than>
  46     </priority>
  47     <authorize>
  48       <permissions>create read update delete execute</permissions>
  49       <path>/rw-project:project/rw-ro-account:ro-account</path>
  50       <path>/rw-ro-account:update-ro-account-status</path>
  51       <path>/rw-project:project/rw-ro-account:ro-account-state</path>
  52     </authorize>
  53   </role-definition>
  54
  55   <role-definition>
  56     <role>rw-project-mano:lcm-admin</role>
  57     <keys-role>rw-project-mano:rw-ro-account-role</keys-role>
  58     <authorize>
  59       <permissions>read execute</permissions>
  60       <path>/rw-project:project/rw-ro-account:ro-account</path>
  61       <path>/rw-project:project/rw-ro-account:ro-account-state</path>
  62     </authorize>
  63   </role-definition>
  64
  65   <role-definition>
  66     <role>rw-project:project-admin</role>
  67     <keys-role>rw-project-mano:rw-ro-account-role</keys-role>
  68     <authorize>
  69       <permissions>create read update delete execute</permissions>
  70       <path>/rw-ro-account:update-ro-account-status</path>
  71     </authorize>
  72   </role-definition>
  73 </config>