blob: 2cade8451ae1b19dfbebacc9aaeecbf351f4d7d5 [file] [log] [blame]
<?xml version="1.0" encoding="UTF-8"?>
<!--
~ Copyright (c) 2009-2014. Joshua Tree Software, LLC. All Rights Reserved.
-->
<project basedir="." default="all" name="Fortress Sample Data">
<taskdef classname="us.jts.fortress.ant.FortressAntTask" name="FortressAdmin" >
<classpath path="${java.class.path}"/>
</taskdef>
<target name="all">
<FortressAdmin>
<adduser>
<user userId="test" password="test" description="Commander Demo User" ou="demousrs1" cn="test" sn="user" pwPolicy="Test1" beginTime="0000" endTime="0000" beginDate="20090101" endDate="20990101" beginLockDate="none" endLockDate="none" dayMask="1234567" timeout="0" photo="TestPhoto1.jpeg"/>
<user userId="test1" password="test" description="Commander Demo User1" ou="demousrs1" cn="test1" sn="user" pwPolicy="Test1" beginTime="0000" endTime="0000" beginDate="20090101" endDate="20990101" beginLockDate="none" endLockDate="none" dayMask="1234567" timeout="0"/>
<user userId="test2" password="test" description="Commander Demo User2" ou="demousrs1" cn="test2" sn="user" pwPolicy="Test1" beginTime="0000" endTime="0000" beginDate="20090101" endDate="20990101" beginLockDate="none" endLockDate="none" dayMask="1234567" timeout="0"/>
</adduser>
<adduseradminrole>
<userrole userId="test" name="FortressSuperAdmin" beginTime="0000" endTime="0000" beginDate="none" endDate="none" beginLockDate="none" endLockDate="none" dayMask="all" timeout="0"/>
<userrole userId="test1" name="UserAdmin" beginTime="0000" endTime="0000" beginDate="none" endDate="none" beginLockDate="none" endLockDate="none" dayMask="all" timeout="0"/>
<userrole userId="test2" name="AuditAdmin" beginTime="0000" endTime="0000" beginDate="none" endDate="none" beginLockDate="none" endLockDate="none" dayMask="all" timeout="0"/>
</adduseradminrole>
<adduserrole>
<userrole userId="test" name="CommanderSuperUser" beginTime="0000" endTime="0000" beginDate="none" endDate="none" beginLockDate="none" endLockDate="none" dayMask="all" timeout="0"/>
<userrole userId="test1" name="ROLE_USERS" beginTime="0000" endTime="0000" beginDate="none" endDate="none" beginLockDate="none" endLockDate="none" dayMask="all" timeout="0"/>
<userrole userId="test2" name="ROLE_AUDITOR" beginTime="0000" endTime="0000" beginDate="none" endDate="none" beginLockDate="none" endLockDate="none" dayMask="all" timeout="0"/>
</adduserrole>
<addadminrole>
<role name="UserAdmin" description="Fortress User Admin" osps="APP0" osus="DEV0" begininclusive="true" endinclusive="true" beginTime="0000" endTime="0000" beginDate="none" endDate="none" beginLockDate="none" endLockDate="none" dayMask="all" timeout="0" beginrange="" endrange=""/>
<role name="AuditAdmin" description="Fortress Auditor" osps="APP0" osus="DEV0" begininclusive="true" endinclusive="true" beginTime="0000" endTime="0000" beginDate="none" endDate="none" beginLockDate="none" endLockDate="none" dayMask="all" timeout="0" beginrange="" endrange=""/>
</addadminrole>
<addpermgrant>
<permgrant objName="us.jts.fortress.rbac.AuditMgrImpl" opName="searchBinds" roleNm="AuditAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.AuditMgrImpl" opName="searchAuthZs" roleNm="AuditAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.AuditMgrImpl" opName="getUserAuthZs" roleNm="AuditAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.AuditMgrImpl" opName="searchUserSessions" roleNm="AuditAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.AuditMgrImpl" opName="searchAdminMods" roleNm="AuditAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.AuditMgrImpl" opName="searchInvalidUsers" roleNm="AuditAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.ReviewMgrImpl" opName="readUser" roleNm="AuditAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.ReviewMgrImpl" opName="findUsers" roleNm="AuditAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.ReviewMgrImpl" opName="findPermissions" roleNm="AuditAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.ReviewMgrImpl" opName="readUser" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.ReviewMgrImpl" opName="findUsers" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.ReviewMgrImpl" opName="assignedUsers" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.ReviewMgrImpl" opName="assignedRoles" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.ReviewMgrImpl" opName="authorizedUsers" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.ReviewMgrImpl" opName="authorizedRoles" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.ReviewMgrImpl" opName="userPermissions" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.ReviewMgrImpl" opName="findPermissions" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.ReviewMgrImpl" opName="findRoles" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.DelReviewMgrImpl" opName="searchOU" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.AdminMgrImpl" opName="addUser" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.AdminMgrImpl" opName="disableUser" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.AdminMgrImpl" opName="deleteUser" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.AdminMgrImpl" opName="updateUser" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.AdminMgrImpl" opName="changePassword" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.AdminMgrImpl" opName="lockUserAccount" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.AdminMgrImpl" opName="unlockUserAccount" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.AdminMgrImpl" opName="resetPassword" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.AdminMgrImpl" opName="assignUser" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.AdminMgrImpl" opName="deassignUser" roleNm="UserAdmin" admin="true"/>
<permgrant objName="us.jts.fortress.rbac.PwPolicyMgrImpl" opName="updateUserPolicy" roleNm="FortressSuperAdmin" admin="true"/>
</addpermgrant>
<addrole>
<role name="ROLE_USERS" description="Grants User page access in Commander"/>
<role name="ROLE_ROLES" description="Grants Role page access in Commander"/>
<role name="ROLE_PERMS" description="Grants Perm page access in Commander"/>
<role name="ROLE_SSDS" description="Grants Static SoD page access in Commander"/>
<role name="ROLE_DSDS" description="Grants Dynamic SoD page access in Commander"/>
<role name="ROLE_POLICIES" description="Grants Password Policy page access in Commander"/>
<role name="ROLE_PERMOBJS" description="Grants Permission Object page access in Commander"/>
<role name="ROLE_USEROUS" description="Grants User Organization page access in Commander"/>
<role name="ROLE_PERMOUS" description="Grants Permission Organization page access in Commander"/>
<role name="ROLE_ADMINROLES" description="Grants Admin Role page access in Commander"/>
<role name="ROLE_ADMINOBJS" description="Grants Admin Permission Object page access in Commander"/>
<role name="ROLE_ADMINPERMS" description="Grants Admin Permission page access in Commander"/>
<role name="ROLE_AUDIT_AUTHZS" description="Grants Audit Authorization page access in Commander"/>
<role name="ROLE_AUDIT_MODS" description="Grants Audit Modification page access in Commander"/>
<role name="ROLE_AUDIT_BINDS" description="Grants Audit Bind page access in Commander"/>
<role name="ROLE_AUDITOR" description="Grants acces to all Audit pages"/>
<role name="CommanderSuperUser" description="Role to access Commander pages and funtions"/>
</addrole>
<addroleinheritance>
<relationship child="CommanderSuperUser" parent="ROLE_USERS"/>
<relationship child="CommanderSuperUser" parent="ROLE_ROLES"/>
<relationship child="CommanderSuperUser" parent="ROLE_PERMS"/>
<relationship child="CommanderSuperUser" parent="ROLE_SSDS"/>
<relationship child="CommanderSuperUser" parent="ROLE_DSDS"/>
<relationship child="CommanderSuperUser" parent="ROLE_POLICIES"/>
<relationship child="CommanderSuperUser" parent="ROLE_PERMOBJS"/>
<relationship child="CommanderSuperUser" parent="ROLE_USEROUS"/>
<relationship child="CommanderSuperUser" parent="ROLE_PERMOUS"/>
<relationship child="CommanderSuperUser" parent="ROLE_ADMINROLES"/>
<relationship child="CommanderSuperUser" parent="ROLE_ADMINOBJS"/>
<relationship child="CommanderSuperUser" parent="ROLE_ADMINPERMS"/>
<relationship child="CommanderSuperUser" parent="ROLE_AUDIT_AUTHZS"/>
<relationship child="CommanderSuperUser" parent="ROLE_AUDIT_BINDS"/>
<relationship child="CommanderSuperUser" parent="ROLE_AUDIT_MODS"/>
<relationship child="ROLE_AUDITOR" parent="ROLE_AUDIT_BINDS"/>
<relationship child="ROLE_AUDITOR" parent="ROLE_AUDIT_AUTHZS"/>
<relationship child="ROLE_AUDITOR" parent="ROLE_AUDIT_MODS"/>
</addroleinheritance>
</FortressAdmin>
</target>
</project>