models/plugins/yang/project-nsd.role.xml

   1 <?xml version="1.0" ?>
   2 <config xmlns="http://riftio.com/ns/riftware-1.0/rw-rbac-role-def">
   3   <key-definition>
   4     <role>rw-project-mano:project-nsd-role</role>
   5     <key-set>
   6       <name>project-name</name>
   7       <path>/rw-project:project/rw-project:name</path>
   8     </key-set>
   9   </key-definition>
  10
  11   <role-definition>
  12     <role>rw-project-mano:catalog-oper</role>
  13     <keys-role>rw-project-mano:project-nsd-role</keys-role>
  14     <priority>
  15       <lower-than>
  16         <role>rw-project:project-admin</role>
  17       </lower-than>
  18     </priority>
  19     <authorize>
  20       <permissions>read execute</permissions>
  21       <path>/rw-project:project/project-nsd:nsd-catalog</path>
  22     </authorize>
  23   </role-definition>
  24
  25   <role-definition>
  26     <role>rw-project-mano:catalog-admin</role>
  27     <keys-role>rw-project-mano:project-nsd-role</keys-role>
  28     <priority>
  29       <higher-than>
  30         <role>rw-project-mano:catalog-oper</role>
  31       </higher-than>
  32       <higher-than>
  33         <role>rw-project-mano:account-oper</role>
  34       </higher-than>
  35       <higher-than>
  36         <role>rw-project-mano:lcm-oper</role>
  37       </higher-than>
  38       <higher-than>
  39         <role>rw-project:project-oper</role>
  40       </higher-than>
  41       <higher-than>
  42         <role>rw-project-mano:lcm-admin</role>
  43       </higher-than>
  44     </priority>
  45
  46     <authorize>
  47       <permissions>create read update delete execute</permissions>
  48       <path>/rw-project:project/project-nsd:nsd-catalog</path>
  49     </authorize>
  50   </role-definition>
  51
  52   <role-definition>
  53     <role>rw-project-mano:lcm-admin</role>
  54     <keys-role>rw-project-mano:project-nsd-role</keys-role>
  55     <authorize>
  56       <permissions>read execute</permissions>
  57       <path>/rw-project:project/project-nsd:nsd-catalog</path>
  58     </authorize>
  59   </role-definition>
  60 </config>