blob: b202474fa2ca5eef16ad6f3d96dc56ebfcd56fb1 [file] [log] [blame]
<?xml version="1.0"?>
<!--
~ Licensed to the Apache Software Foundation (ASF) under one
~ or more contributor license agreements. See the NOTICE file
~ distributed with this work for additional information
~ regarding copyright ownership. The ASF licenses this file
~ to you under the Apache License, Version 2.0 (the
~ "License"); you may not use this file except in compliance
~ with the License. You may obtain a copy of the License at
~
~ http://www.apache.org/licenses/LICENSE-2.0
~
~ Unless required by applicable law or agreed to in writing,
~ software distributed under the License is distributed on an
~ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
~ KIND, either express or implied. See the License for the
~ specific language governing permissions and limitations
~ under the License.
-->
<rbacDatabase>
<roles>
<role>
<name>User Administrator</name>
<assignable>true</assignable>
<permissions>
<permission name="Edit All Users"></permission>
<permission name="Remove Roles"></permission>
</permissions>
</role>
<role>
<name>System Administrator</name>
<assignable>true</assignable>
<childRoleNames>
<childRoleName>User Administrator</childRoleName>
</childRoleNames>
<permissions>
<permission name="Edit Configuration"></permission>
<permission name="Run Indexer"></permission>
<permission name="Add Repository"></permission>
<permission name="Regenerate Index"></permission>
</permissions>
</role>
<role>
<name>Trusted Developer</name>
<assignable>true</assignable>
<childRoleNames>
<childRoleName>System Administrator</childRoleName>
</childRoleNames>
<permissions>
<permission name="Run Indexer"></permission>
</permissions>
</role>
<role>
<name>Developer</name>
<assignable>true</assignable>
<childRoleNames>
<childRoleName>Trusted Developer</childRoleName>
</childRoleNames>
<permissions>
<permission name="Run Indexer"></permission>
</permissions>
</role>
</roles>
<permissions>
<permission>
<name>Edit Configuration</name>
<operation name="edit-configuration"></operation>
<resource identifier="*"></resource>
</permission>
<permission>
<name>Run Indexer</name>
<operation name="run-indexer"></operation>
<resource identifier="*"></resource>
</permission>
<permission>
<name>Add Repository</name>
<operation name="add-repository"></operation>
<resource identifier="*"></resource>
</permission>
<permission>
<name>Edit All Users</name>
<operation name="edit-all-users"></operation>
<resource identifier="*"></resource>
</permission>
<permission>
<name>Remove Roles</name>
<operation name="remove-roles"></operation>
<resource identifier="*"></resource>
</permission>
<permission>
<name>Regenerate Index</name>
<operation name="regenerate-index"></operation>
<resource identifier="*"></resource>
</permission>
</permissions>
<operations>
<operation>
<name>add-repository</name>
</operation>
<operation>
<name>edit-repository</name>
</operation>
<operation>
<name>delete-repository</name>
</operation>
<operation>
<name>edit-configuration</name>
</operation>
<operation>
<name>run-indexer</name>
</operation>
<operation>
<name>regenerate-index</name>
</operation>
<operation>
<name>get-reports</name>
</operation>
<operation>
<name>regenerate-reports</name>
</operation>
<operation>
<name>edit-user</name>
</operation>
<operation>
<name>edit-all-users</name>
</operation>
<operation>
<name>remove-roles</name>
</operation>
</operations>
<resources>
<resource>
<identifier>*</identifier>
<permanent>true</permanent>
</resource>
</resources>
<userAssignments>
<userAssignment>
<principal>bob</principal>
<roleNames>
<roleName>Developer</roleName>
</roleNames>
</userAssignment>
<userAssignment>
<principal>betty</principal>
<roleNames>
<roleName>System Administrator</roleName>
</roleNames>
</userAssignment>
</userAssignments>
</rbacDatabase>