|
@@ -0,0 +1,62 @@
|
|
|
+security:
|
|
|
+
|
|
|
+ role_hierarchy:
|
|
|
+
|
|
|
+ # ONU
|
|
|
+ ROLE_SONATA_ONU_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_ONU_LIST, ROLE_SONATA_ADMIN_ONU_VIEW]
|
|
|
+ ROLE_SONATA_ONU_EDITOR: [ROLE_SONATA_ONU_READER, ROLE_SONATA_ADMIN_ONU_CREATE, ROLE_SONATA_ADMIN_ONU_EDIT]
|
|
|
+ ROLE_SONATA_ONU_ADMIN: [ROLE_SONATA_ONU_EDITOR, ROLE_SONATA_ADMIN_ONU_DELETE, ROLE_SONATA_ADMIN_ONU_EXPORT]
|
|
|
+
|
|
|
+ # OLT
|
|
|
+ ROLE_SONATA_OLT_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_OLT_LIST, ROLE_SONATA_ADMIN_OLT_VIEW]
|
|
|
+ ROLE_SONATA_OLT_EDITOR: [ROLE_SONATA_OLT_READER, ROLE_SONATA_ADMIN_OLT_CREATE, ROLE_SONATA_ADMIN_OLT_EDIT]
|
|
|
+ ROLE_SONATA_OLT_ADMIN: [ROLE_SONATA_OLT_EDITOR, ROLE_SONATA_ADMIN_OLT_DELETE, ROLE_SONATA_ADMIN_OLT_EXPORT]
|
|
|
+
|
|
|
+ # PROFILE
|
|
|
+ ROLE_SONATA_PROFILE_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_PROFILE_LIST, ROLE_SONATA_ADMIN_PROFILE_VIEW]
|
|
|
+ ROLE_SONATA_PROFILE_EDITOR: [ROLE_SONATA_PROFILE_READER, ROLE_SONATA_ADMIN_PROFILE_CREATE, ROLE_SONATA_ADMIN_PROFILE_EDIT]
|
|
|
+ ROLE_SONATA_PROFILE_ADMIN: [ROLE_SONATA_PROFILE_EDITOR, ROLE_SONATA_ADMIN_PROFILE_DELETE, ROLE_SONATA_ADMIN_PROFILE_EXPORT]
|
|
|
+
|
|
|
+ # NAP
|
|
|
+ ROLE_SONATA_NAP_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_NAP_LIST, ROLE_SONATA_ADMIN_NAP_VIEW]
|
|
|
+ ROLE_SONATA_NAP_EDITOR: [ROLE_SONATA_NAP_READER, ROLE_SONATA_ADMIN_NAP_CREATE, ROLE_SONATA_ADMIN_NAP_EDIT]
|
|
|
+ ROLE_SONATA_NAP_ADMIN: [ROLE_SONATA_NAP_EDITOR, ROLE_SONATA_ADMIN_NAP_DELETE, ROLE_SONATA_ADMIN_NAP_EXPORT]
|
|
|
+
|
|
|
+ # ONU_MODEL
|
|
|
+ ROLE_SONATA_ONU_MODEL_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_ONU_MODEL_LIST, ROLE_SONATA_ADMIN_ONU_MODEL_VIEW]
|
|
|
+ ROLE_SONATA_ONU_MODEL_EDITOR: [ROLE_SONATA_ONU_MODEL_READER, ROLE_SONATA_ADMIN_ONU_MODEL_CREATE, ROLE_SONATA_ADMIN_ONU_MODEL_EDIT]
|
|
|
+ ROLE_SONATA_ONU_MODEL_ADMIN: [ROLE_SONATA_ONU_MODEL_EDITOR, ROLE_SONATA_ADMIN_ONU_MODEL_DELETE, ROLE_SONATA_ADMIN_ONU_MODEL_EXPORT]
|
|
|
+
|
|
|
+ # OLT_MODEL
|
|
|
+ ROLE_SONATA_OLT_MODEL_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_OLT_MODEL_LIST, ROLE_SONATA_ADMIN_OLT_MODEL_VIEW]
|
|
|
+ ROLE_SONATA_OLT_MODEL_EDITOR: [ROLE_SONATA_OLT_MODEL_READER, ROLE_SONATA_ADMIN_OLT_MODEL_CREATE, ROLE_SONATA_ADMIN_OLT_MODEL_EDIT]
|
|
|
+ ROLE_SONATA_OLT_MODEL_ADMIN: [ROLE_SONATA_OLT_MODEL_EDITOR, ROLE_SONATA_ADMIN_OLT_MODEL_DELETE, ROLE_SONATA_ADMIN_OLT_MODEL_EXPORT]
|
|
|
+
|
|
|
+ # NAS_MODEL
|
|
|
+ ROLE_SONATA_NAS_MODEL_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_NAS_MODEL_LIST, ROLE_SONATA_ADMIN_NAS_MODEL_VIEW]
|
|
|
+ ROLE_SONATA_NAS_MODEL_EDITOR: [ROLE_SONATA_NAS_MODEL_READER, ROLE_SONATA_ADMIN_NAS_MODEL_CREATE, ROLE_SONATA_ADMIN_NAS_MODEL_EDIT]
|
|
|
+ ROLE_SONATA_NAS_MODEL_ADMIN: [ROLE_SONATA_NAS_MODEL_EDITOR, ROLE_SONATA_ADMIN_NAS_MODEL_DELETE, ROLE_SONATA_ADMIN_NAS_MODEL_EXPORT]
|
|
|
+
|
|
|
+ # NAS
|
|
|
+ ROLE_SONATA_NAS_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_NAS_LIST, ROLE_SONATA_ADMIN_NAS_VIEW]
|
|
|
+ ROLE_SONATA_NAS_EDITOR: [ROLE_SONATA_NAS_READER, ROLE_SONATA_ADMIN_NAS_CREATE, ROLE_SONATA_ADMIN_NAS_EDIT]
|
|
|
+ ROLE_SONATA_NAS_ADMIN: [ROLE_SONATA_NAS_EDITOR, ROLE_SONATA_ADMIN_NAS_DELETE, ROLE_SONATA_ADMIN_NAS_EXPORT]
|
|
|
+
|
|
|
+ # WORKFLOW
|
|
|
+ ROLE_SONATA_WORKFLOW_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_WORKFLOW_LIST, ROLE_SONATA_ADMIN_WORKFLOW_VIEW]
|
|
|
+ ROLE_SONATA_WORKFLOW_EDITOR: [ROLE_SONATA_WORKFLOW_READER, ROLE_SONATA_ADMIN_WORKFLOW_CREATE, ROLE_SONATA_ADMIN_WORKFLOW_EDIT]
|
|
|
+ ROLE_SONATA_WORKFLOW_ADMIN: [ROLE_SONATA_WORKFLOW_EDITOR, ROLE_SONATA_ADMIN_WORKFLOW_DELETE, ROLE_SONATA_ADMIN_WORKFLOW_EXPORT]
|
|
|
+
|
|
|
+ # ACTION
|
|
|
+ ROLE_SONATA_ACTION_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_ACTION_LIST, ROLE_SONATA_ADMIN_ACTION_VIEW]
|
|
|
+ ROLE_SONATA_ACTION_EDITOR: [ROLE_SONATA_ACTION_READER, ROLE_SONATA_ADMIN_ACTION_CREATE, ROLE_SONATA_ADMIN_ACTION_EDIT]
|
|
|
+ ROLE_SONATA_ACTION_ADMIN: [ROLE_SONATA_ACTION_EDITOR, ROLE_SONATA_ADMIN_ACTION_DELETE, ROLE_SONATA_ADMIN_ACTION_EXPORT]
|
|
|
+
|
|
|
+ # TEMPLATE
|
|
|
+ ROLE_SONATA_TEMPLATE_READER: [ROLE_ADMIN, ROLE_SONATA_ADMIN_TEMPLATE_LIST, ROLE_SONATA_ADMIN_TEMPLATE_VIEW]
|
|
|
+ ROLE_SONATA_TEMPLATE_EDITOR: [ROLE_SONATA_TEMPLATE_READER, ROLE_SONATA_ADMIN_TEMPLATE_CREATE, ROLE_SONATA_ADMIN_TEMPLATE_EDIT]
|
|
|
+ ROLE_SONATA_TEMPLATE_ADMIN: [ROLE_SONATA_TEMPLATE_EDITOR, ROLE_SONATA_ADMIN_TEMPLATE_DELETE, ROLE_SONATA_ADMIN_TEMPLATE_EXPORT]
|
|
|
+
|
|
|
+ ROLE_ADMIN_TENANCIES: ROLE_ADMIN_TENANCIES
|
|
|
+ ROLE_ADMIN: [ROLE_USER, ROLE_SONATA_ADMIN]
|
|
|
+ ROLE_SUPER_ADMIN: [ROLE_ADMIN, ROLE_USER_CREATE, ROLE_ADMIN_TENANCIES, ROLE_ALLOWED_TO_SWITCH]
|