| <?xml version="1.0" encoding="UTF-8"?> |
| <!-- |
| # Licensed to the Apache Software Foundation (ASF) under one |
| # or more contributor license agreements. See the NOTICE file |
| # distributed with this work for additional information |
| # regarding copyright ownership. The ASF licenses this file |
| # to you under the Apache License, Version 2.0 (the |
| # "License"); you may not use this file except in compliance |
| # with the License. You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, |
| # software distributed under the License is distributed on an |
| # "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY |
| # KIND, either express or implied. See the License for the |
| # specific language governing permissions and limitations |
| # under the License. |
| --> |
| <serviceGroup> |
| |
| <service name="TenantMgtService" scope="transportsession"> |
| <transports> |
| <transport>https</transport> |
| </transports> |
| <parameter name="ServiceClass" locked="false"> |
| org.apache.stratos.tenant.mgt.services.TenantSelfRegistrationService |
| </parameter> |
| <operation name="registerTenant"> |
| </operation> |
| <operation name="checkDomainAvailability"> |
| </operation> |
| <operation name="validateOrSuggestDomain"> |
| </operation> |
| <operation name="generateRandomCaptcha"> |
| </operation> |
| </service> |
| |
| <service name="TenantMgtAdminService" scope="transportsession"> |
| <transports> |
| <transport>https</transport> |
| </transports> |
| <parameter name="ServiceClass" locked="false"> |
| org.apache.stratos.tenant.mgt.services.TenantMgtAdminService |
| </parameter> |
| <operation name="addTenant"> |
| <parameter name="superTenantService" locked="true">true</parameter> |
| <parameter name="AuthorizationAction" locked="true">/permission/protected/manage/monitor/tenants</parameter> |
| </operation> |
| <operation name="addSkeletonTenant"> |
| <parameter name="superTenantService" locked="true">true</parameter> |
| <parameter name="AuthorizationAction" locked="true">/permission/protected/manage/monitor/tenants</parameter> |
| </operation> |
| <operation name="retrieveTenants"> |
| <parameter name="superTenantService" locked="true">true</parameter> |
| <parameter name="AuthorizationAction" locked="true">/permission/protected/manage/monitor/tenants</parameter> |
| </operation> |
| <operation name="retrievePaginatedTenants"> |
| <parameter name="superTenantService" locked="true">true</parameter> |
| <parameter name="AuthorizationAction" locked="true">/permission/protected/manage/monitor/tenants</parameter> |
| </operation> |
| <operation name="retrievePartialSearchTenants"> |
| <parameter name="superTenantService" locked="true">true</parameter> |
| <parameter name="AuthorizationAction" locked="true">/permission/protected/manage/monitor/tenants</parameter> |
| </operation> |
| <operation name="retrievePaginatedPartialSearchTenants"> |
| <parameter name="superTenantService" locked="true">true</parameter> |
| <parameter name="AuthorizationAction" locked="true">/permission/protected/manage/monitor/tenants</parameter> |
| </operation> |
| <operation name="getTenant"> |
| <parameter name="superTenantService" locked="true">true</parameter> |
| <parameter name="AuthorizationAction" locked="true">/permission/protected/manage/monitor/tenants</parameter> |
| </operation> |
| <operation name="updateTenant"> |
| <parameter name="superTenantService" locked="true">true</parameter> |
| <parameter name="AuthorizationAction" locked="true">/permission/protected/manage/modify/tenants</parameter> |
| </operation> |
| <operation name="activateTenant"> |
| <parameter name="superTenantService" locked="true">true</parameter> |
| <parameter name="AuthorizationAction" locked="true">/permission/protected/manage/modify/tenants</parameter> |
| </operation> |
| <operation name="deactivateTenant"> |
| <parameter name="superTenantService" locked="true">true</parameter> |
| <parameter name="AuthorizationAction" locked="true">/permission/protected/manage/modify/tenants</parameter> |
| </operation> |
| <operation name="deleteTenant"> |
| <parameter name="superTenantService" locked="true">true</parameter> |
| <parameter name="AuthorizationAction" locked="true">/permission/protected/manage/modify/tenants</parameter> |
| </operation> |
| <parameter name="adminService" locked="true">true</parameter> |
| </service> |
| |
| <service name="GAppTenantRegistrationService"> |
| <transports> |
| <transport>https</transport> |
| </transports> |
| <schema schemaNamespace="http://org.apache.axis2/xsd" elementFormDefaultQualified="true"/> |
| <description>Rampart protected service that is used to setup Google Apps domain</description> |
| <parameter name="ServiceClass">org.apache.stratos.tenant.mgt.services.GAppTenantRegistrationService</parameter> |
| <parameter name="adminService" locked="true">false</parameter> |
| |
| <module ref="rampart"/> |
| |
| <wsp:Policy wsu:Id="SigOnly" |
| xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" |
| xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"> |
| <wsp:ExactlyOne> |
| <wsp:All> |
| <sp:AsymmetricBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy"> |
| <wsp:Policy> |
| <sp:InitiatorToken> |
| <wsp:Policy> |
| <sp:X509Token |
| sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient"> |
| <wsp:Policy> |
| <sp:RequireThumbprintReference/> |
| <sp:WssX509V3Token10/> |
| </wsp:Policy> |
| </sp:X509Token> |
| </wsp:Policy> |
| </sp:InitiatorToken> |
| <sp:RecipientToken> |
| <wsp:Policy> |
| <sp:X509Token |
| sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never"> |
| <wsp:Policy> |
| <sp:RequireThumbprintReference/> |
| <sp:WssX509V3Token10/> |
| </wsp:Policy> |
| </sp:X509Token> |
| </wsp:Policy> |
| </sp:RecipientToken> |
| <sp:AlgorithmSuite> |
| <wsp:Policy> |
| <sp:Basic256/> |
| </wsp:Policy> |
| </sp:AlgorithmSuite> |
| <sp:Layout> |
| <wsp:Policy> |
| <sp:Strict/> |
| </wsp:Policy> |
| </sp:Layout> |
| <sp:IncludeTimestamp/> |
| <sp:OnlySignEntireHeadersAndBody/> |
| </wsp:Policy> |
| </sp:AsymmetricBinding> |
| <sp:Wss10 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy"> |
| <wsp:Policy> |
| <sp:MustSupportRefKeyIdentifier/> |
| <sp:MustSupportRefIssuerSerial/> |
| </wsp:Policy> |
| </sp:Wss10> |
| <sp:SignedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy"> |
| <sp:Body/> |
| </sp:SignedParts> |
| </wsp:All> |
| </wsp:ExactlyOne> |
| </wsp:Policy> |
| </service> |
| <parameter name="hiddenService" locked="true">true</parameter> |
| </serviceGroup> |