roles.yml 6.3 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182
  1. security:
  2. role_hierarchy:
  3. # HOST
  4. ROLE_SONATA_HOST_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_HOST_LIST, ROLE_SONATA_ADMIN_HOST_VIEW]
  5. ROLE_SONATA_HOST_EDITOR: [ROLE_SONATA_HOST_READER, ROLE_SONATA_ADMIN_HOST_CREATE, ROLE_SONATA_ADMIN_HOST_EDIT]
  6. ROLE_SONATA_HOST_ADMIN: [ROLE_SONATA_HOST_EDITOR, ROLE_SONATA_ADMIN_HOST_DELETE, ROLE_SONATA_ADMIN_HOST_EXPORT]
  7. # HOST_TYPE
  8. ROLE_SONATA_HOST_TYPE_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_HOST_TYPE_LIST, ROLE_SONATA_ADMIN_HOST_TYPE_VIEW]
  9. ROLE_SONATA_HOST_TYPE_EDITOR: [ROLE_SONATA_HOST_TYPE_READER, ROLE_SONATA_ADMIN_HOST_TYPE_CREATE, ROLE_SONATA_ADMIN_HOST_TYPE_EDIT]
  10. ROLE_SONATA_HOST_TYPE_ADMIN: [ROLE_SONATA_HOST_TYPE_EDITOR, ROLE_SONATA_ADMIN_HOST_TYPE_DELETE, ROLE_SONATA_ADMIN_HOST_TYPE_EXPORT]
  11. # NET_GROUP
  12. ROLE_SONATA_NET_GROUP_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_NET_GROUP_LIST, ROLE_SONATA_ADMIN_NET_GROUP_VIEW]
  13. ROLE_SONATA_NET_GROUP_EDITOR: [ROLE_SONATA_NET_GROUP_READER, ROLE_SONATA_ADMIN_NET_GROUP_CREATE, ROLE_SONATA_ADMIN_NET_GROUP_EDIT]
  14. ROLE_SONATA_NET_GROUP_ADMIN: [ROLE_SONATA_NET_GROUP_EDITOR, ROLE_SONATA_ADMIN_NET_GROUP_DELETE, ROLE_SONATA_ADMIN_NET_GROUP_EXPORT]
  15. # IPV_4_POOL
  16. ROLE_SONATA_IPV_4_POOL_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_IPV_4_POOL_LIST, ROLE_SONATA_ADMIN_IPV_4_POOL_VIEW]
  17. ROLE_SONATA_IPV_4_POOL_EDITOR: [ROLE_SONATA_IPV_4_POOL_READER, ROLE_SONATA_ADMIN_IPV_4_POOL_CREATE, ROLE_SONATA_ADMIN_IPV_4_POOL_EDIT]
  18. ROLE_SONATA_IPV_4_POOL_ADMIN: [ROLE_SONATA_IPV_4_POOL_EDITOR, ROLE_SONATA_ADMIN_IPV_4_POOL_DELETE, ROLE_SONATA_ADMIN_IPV_4_POOL_EXPORT]
  19. # SUB_NET
  20. ROLE_SONATA_SUB_NET_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_SUB_NET_LIST, ROLE_SONATA_ADMIN_SUB_NET_VIEW]
  21. ROLE_SONATA_SUB_NET_EDITOR: [ROLE_SONATA_SUB_NET_READER, ROLE_SONATA_ADMIN_SUB_NET_CREATE, ROLE_SONATA_ADMIN_SUB_NET_EDIT]
  22. ROLE_SONATA_SUB_NET_ADMIN: [ROLE_SONATA_SUB_NET_EDITOR, ROLE_SONATA_ADMIN_SUB_NET_DELETE, ROLE_SONATA_ADMIN_SUB_NET_EXPORT]
  23. # NET_GROUP IPv6
  24. ROLE_SONATA_IPV_6_NET_GROUP_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_IPV_6_NET_GROUP_LIST, ROLE_SONATA_ADMIN_IPV_6_NET_GROUP_VIEW]
  25. ROLE_SONATA_IPV_6_NET_GROUP_EDITOR: [ROLE_SONATA_IPV_6_NET_GROUP_READER, ROLE_SONATA_ADMIN_IPV_6_NET_GROUP_CREATE, ROLE_SONATA_ADMIN_IPV_6_NET_GROUP_EDIT]
  26. ROLE_SONATA_IPV_6_NET_GROUP_ADMIN: [ROLE_SONATA_IPV_6_NET_GROUP_EDITOR, ROLE_SONATA_ADMIN_IPV_6_NET_GROUP_DELETE, ROLE_SONATA_ADMIN_IPV_6_NET_GROUP_EXPORT]
  27. # POOL IPv6
  28. ROLE_SONATA_IPV_6_POOL_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_IPV_6_POOL_LIST, ROLE_SONATA_ADMIN_IPV_6_POOL_VIEW]
  29. ROLE_SONATA_IPV_6_POOL_EDITOR: [ROLE_SONATA_IPV_6_POOL_READER, ROLE_SONATA_ADMIN_IPV_6_POOL_CREATE, ROLE_SONATA_ADMIN_IPV_6_POOL_EDIT]
  30. ROLE_SONATA_IPV_6_POOL_ADMIN: [ROLE_SONATA_IPV_6_POOL_EDITOR, ROLE_SONATA_ADMIN_IPV_6_POOL_DELETE, ROLE_SONATA_ADMIN_IPV_6_POOL_EXPORT]
  31. # SUB_NET IPv6
  32. ROLE_SONATA_IPV_6_SUB_NET_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_IPV_6_SUB_NET_LIST, ROLE_SONATA_ADMIN_IPV_6_SUB_NET_VIEW]
  33. ROLE_SONATA_IPV_6_SUB_NET_EDITOR: [ROLE_SONATA_IPV_6_SUB_NET_READER, ROLE_SONATA_ADMIN_IPV_6_SUB_NET_CREATE, ROLE_SONATA_ADMIN_IPV_6_SUB_NET_EDIT]
  34. ROLE_SONATA_IPV_6_SUB_NET_ADMIN: [ROLE_SONATA_IPV_6_SUB_NET_EDITOR, ROLE_SONATA_ADMIN_IPV_6_SUB_NET_DELETE, ROLE_SONATA_ADMIN_IPV_6_SUB_NET_EXPORT]
  35. # DHCP
  36. ROLE_SONATA_DHCP_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_DHCP_LIST, ROLE_SONATA_ADMIN_DHCP_VIEW]
  37. ROLE_SONATA_DHCP_EDITOR: [ROLE_SONATA_DHCP_READER, ROLE_SONATA_ADMIN_DHCP_CREATE, ROLE_SONATA_ADMIN_DHCP_EDIT]
  38. ROLE_SONATA_DHCP_ADMIN: [ROLE_SONATA_DHCP_EDITOR, ROLE_SONATA_ADMIN_DHCP_DELETE, ROLE_SONATA_ADMIN_DHCP_EXPORT]
  39. # DHCP_MODEL
  40. ROLE_SONATA_DHCP_MODEL_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_DHCP_MODEL_LIST, ROLE_SONATA_ADMIN_DHCP_MODEL_VIEW]
  41. ROLE_SONATA_DHCP_MODEL_EDITOR: [ROLE_SONATA_DHCP_MODEL_READER, ROLE_SONATA_ADMIN_DHCP_MODEL_CREATE, ROLE_SONATA_ADMIN_DHCP_MODEL_EDIT]
  42. ROLE_SONATA_DHCP_MODEL_ADMIN: [ROLE_SONATA_DHCP_MODEL_EDITOR, ROLE_SONATA_ADMIN_DHCP_MODEL_DELETE, ROLE_SONATA_ADMIN_DHCP_MODEL_EXPORT]
  43. # WORKFLOW
  44. ROLE_SONATA_WORKFLOW_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_WORKFLOW_LIST, ROLE_SONATA_ADMIN_WORKFLOW_VIEW]
  45. ROLE_SONATA_WORKFLOW_EDITOR: [ROLE_SONATA_WORKFLOW_READER, ROLE_SONATA_ADMIN_WORKFLOW_CREATE, ROLE_SONATA_ADMIN_WORKFLOW_EDIT]
  46. ROLE_SONATA_WORKFLOW_ADMIN: [ROLE_SONATA_WORKFLOW_EDITOR, ROLE_SONATA_ADMIN_WORKFLOW_DELETE, ROLE_SONATA_ADMIN_WORKFLOW_EXPORT]
  47. # ACTION
  48. ROLE_SONATA_ACTION_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_ACTION_LIST, ROLE_SONATA_ADMIN_ACTION_VIEW]
  49. ROLE_SONATA_ACTION_EDITOR: [ROLE_SONATA_ACTION_READER, ROLE_SONATA_ADMIN_ACTION_CREATE, ROLE_SONATA_ADMIN_ACTION_EDIT]
  50. ROLE_SONATA_ACTION_ADMIN: [ROLE_SONATA_ACTION_EDITOR, ROLE_SONATA_ADMIN_ACTION_DELETE, ROLE_SONATA_ADMIN_ACTION_EXPORT]
  51. # TEMPLATE
  52. ROLE_SONATA_TEMPLATE_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_TEMPLATE_LIST, ROLE_SONATA_ADMIN_TEMPLATE_VIEW]
  53. ROLE_SONATA_TEMPLATE_EDITOR: [ROLE_SONATA_TEMPLATE_READER, ROLE_SONATA_ADMIN_TEMPLATE_CREATE, ROLE_SONATA_ADMIN_TEMPLATE_EDIT]
  54. ROLE_SONATA_TEMPLATE_ADMIN: [ROLE_SONATA_TEMPLATE_EDITOR, ROLE_SONATA_ADMIN_TEMPLATE_DELETE, ROLE_SONATA_ADMIN_TEMPLATE_EXPORT]
  55. # KEA
  56. ROLE_SONATA_KEA_CONFIG_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_KEA_CONFIG_LIST, ROLE_SONATA_ADMIN_KEA_CONFIG_VIEW]
  57. ROLE_SONATA_KEA_CONFIG_EDITOR: [ROLE_SONATA_KEA_CONFIG_READER, ROLE_SONATA_ADMIN_KEA_CONFIG_CREATE, ROLE_SONATA_ADMIN_KEA_CONFIG_EDIT]
  58. ROLE_SONATA_KEA_CONFIG_ADMIN: [ROLE_SONATA_KEA_CONFIG_EDITOR, ROLE_SONATA_ADMIN_KEA_CONFIG_DELETE, ROLE_SONATA_ADMIN_KEA_CONFIG_EXPORT]
  59. # LEASE_4
  60. ROLE_SONATA_LEASE_4_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_LEASE_4_LIST, ROLE_SONATA_ADMIN_LEASE_4_VIEW]
  61. ROLE_SONATA_LEASE_4_EDITOR: [ROLE_SONATA_LEASE_4_READER, ROLE_SONATA_ADMIN_LEASE_4_CREATE, ROLE_SONATA_ADMIN_LEASE_4_EDIT]
  62. ROLE_SONATA_LEASE_4_ADMIN: [ROLE_SONATA_LEASE_4_EDITOR, ROLE_SONATA_ADMIN_LEASE_4_DELETE, ROLE_SONATA_ADMIN_LEASE_4_EXPORT]
  63. ROLE_ADMIN_TENANCIES: ROLE_ADMIN_TENANCIES
  64. ROLE_ADMIN: [ROLE_USER, ROLE_SONATA_ADMIN]
  65. ROLE_SUPER_ADMIN: [ROLE_ADMIN, ROLE_USER_CREATE, ROLE_ADMIN_TENANCIES, ROLE_ALLOWED_TO_SWITCH]