models/plugins/yang/nsr.role.xml

   1 <?xml version="1.0" ?>
   2 <config xmlns="http://riftio.com/ns/riftware-1.0/rw-rbac-role-def">
   3   <key-definition>
   4     <role>rw-project-mano:nsr-role</role>
   5     <key-set>
   6       <name>project-name</name>
   7       <path>/rw-project:project/rw-project:name</path>
   8       <path>/nsr:exec-scale-out/nsr:project-name</path>
   9       <path>/nsr:exec-scale-in/nsr:project-name</path>
  10       <path>/nsr:exec-ns-service-primitive/nsr:project-name</path>
  11       <path>/nsr:get-ns-service-primitive-values/nsr:project-name</path>
  12       <path>/nsr:start-network-service/nsr:project-name</path>
  13     </key-set>
  14   </key-definition>
  15
  16   <role-definition>
  17     <role>rw-project-mano:lcm-oper</role>
  18     <keys-role>rw-project-mano:nsr-role</keys-role>
  19     <priority>
  20       <lower-than>
  21         <role>rw-project:project-admin</role>
  22       </lower-than>
  23     </priority>
  24     <authorize>
  25       <permissions>read execute</permissions>
  26       <path>/rw-project:project/nsr:ns-instance-config</path>
  27       <path>/rw-project:project/nsr:ns-instance-opdata</path>
  28       <path>/rw-project:project/nsr:key-pair</path>
  29     </authorize>
  30   </role-definition>
  31
  32   <role-definition>
  33     <role>rw-project-mano:lcm-admin</role>
  34     <keys-role>rw-project-mano:nsr-role</keys-role>
  35     <priority>
  36       <higher-than>
  37         <role>rw-project-mano:lcm-oper</role>
  38       </higher-than>
  39       <higher-than>
  40         <role>rw-project-mano:account-oper</role>
  41       </higher-than>
  42       <higher-than>
  43         <role>rw-project-mano:catalog-oper</role>
  44       </higher-than>
  45       <higher-than>
  46         <role>rw-project:project-oper</role>
  47       </higher-than>
  48
  49     </priority>
  50
  51     <authorize>
  52       <permissions>create read update delete execute</permissions>
  53       <path>/rw-project:project/nsr:ns-instance-config</path>
  54       <path>/rw-project:project/nsr:ns-instance-opdata</path>
  55       <path>/rw-project:project/nsr:key-pair</path>
  56       <path>/nsr:exec-scale-out</path>
  57       <path>/nsr:exec-scale-in</path>
  58       <path>/nsr:exec-ns-service-primitive</path>
  59       <path>/nsr:get-ns-service-primitive-values</path>
  60     </authorize>
  61   </role-definition>
  62
  63   <role-definition>
  64     <role>rw-project:project-admin</role>
  65     <keys-role>rw-project-mano:nsr-role</keys-role>
  66     <authorize>
  67       <permissions>create read update delete execute</permissions>
  68       <path>/nsr:exec-scale-out</path>
  69       <path>/nsr:exec-scale-in</path>
  70       <path>/nsr:exec-ns-service-primitive</path>
  71       <path>/nsr:get-ns-service-primitive-values</path>
  72     </authorize>
  73   </role-definition>
  74 </config>