blob: 512f0022d317ead1da6f7d274944b7f99e332b29 [file] [log] [blame]
<?xml version="1.0" encoding="UTF-8"?>
<!--
# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements. See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership. The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License. You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied. See the License for the
# specific language governing permissions and limitations
# under the License.
-->
<serviceGroup>
<service name="TenantMgtService" scope="transportsession">
<transports>
<transport>https</transport>
</transports>
<parameter name="ServiceClass" locked="false">
org.apache.stratos.tenant.mgt.services.TenantSelfRegistrationService
</parameter>
<operation name="registerTenant">
</operation>
<operation name="checkDomainAvailability">
</operation>
<operation name="validateOrSuggestDomain">
</operation>
<operation name="generateRandomCaptcha">
</operation>
</service>
<service name="TenantMgtAdminService" scope="transportsession">
<transports>
<transport>https</transport>
</transports>
<parameter name="ServiceClass" locked="false">
org.apache.stratos.tenant.mgt.services.TenantMgtAdminService
</parameter>
<operation name="addTenant">
<parameter name="superTenantService" locked="true">true</parameter>
<parameter name="AuthorizationAction" locked="true">/permission/protected/manage/monitor/tenants</parameter>
</operation>
<operation name="addSkeletonTenant">
<parameter name="superTenantService" locked="true">true</parameter>
<parameter name="AuthorizationAction" locked="true">/permission/protected/manage/monitor/tenants</parameter>
</operation>
<operation name="retrieveTenants">
<parameter name="superTenantService" locked="true">true</parameter>
<parameter name="AuthorizationAction" locked="true">/permission/protected/manage/monitor/tenants</parameter>
</operation>
<operation name="retrievePaginatedTenants">
<parameter name="superTenantService" locked="true">true</parameter>
<parameter name="AuthorizationAction" locked="true">/permission/protected/manage/monitor/tenants</parameter>
</operation>
<operation name="retrievePartialSearchTenants">
<parameter name="superTenantService" locked="true">true</parameter>
<parameter name="AuthorizationAction" locked="true">/permission/protected/manage/monitor/tenants</parameter>
</operation>
<operation name="retrievePaginatedPartialSearchTenants">
<parameter name="superTenantService" locked="true">true</parameter>
<parameter name="AuthorizationAction" locked="true">/permission/protected/manage/monitor/tenants</parameter>
</operation>
<operation name="getTenant">
<parameter name="superTenantService" locked="true">true</parameter>
<parameter name="AuthorizationAction" locked="true">/permission/protected/manage/monitor/tenants</parameter>
</operation>
<operation name="updateTenant">
<parameter name="superTenantService" locked="true">true</parameter>
<parameter name="AuthorizationAction" locked="true">/permission/protected/manage/modify/tenants</parameter>
</operation>
<operation name="activateTenant">
<parameter name="superTenantService" locked="true">true</parameter>
<parameter name="AuthorizationAction" locked="true">/permission/protected/manage/modify/tenants</parameter>
</operation>
<operation name="deactivateTenant">
<parameter name="superTenantService" locked="true">true</parameter>
<parameter name="AuthorizationAction" locked="true">/permission/protected/manage/modify/tenants</parameter>
</operation>
<operation name="deleteTenant">
<parameter name="superTenantService" locked="true">true</parameter>
<parameter name="AuthorizationAction" locked="true">/permission/protected/manage/modify/tenants</parameter>
</operation>
<parameter name="adminService" locked="true">true</parameter>
</service>
<service name="GAppTenantRegistrationService">
<transports>
<transport>https</transport>
</transports>
<schema schemaNamespace="http://org.apache.axis2/xsd" elementFormDefaultQualified="true"/>
<description>Rampart protected service that is used to setup Google Apps domain</description>
<parameter name="ServiceClass">org.apache.stratos.tenant.mgt.services.GAppTenantRegistrationService</parameter>
<parameter name="adminService" locked="true">false</parameter>
<module ref="rampart"/>
<wsp:Policy wsu:Id="SigOnly"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy">
<wsp:ExactlyOne>
<wsp:All>
<sp:AsymmetricBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
<wsp:Policy>
<sp:InitiatorToken>
<wsp:Policy>
<sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient">
<wsp:Policy>
<sp:RequireThumbprintReference/>
<sp:WssX509V3Token10/>
</wsp:Policy>
</sp:X509Token>
</wsp:Policy>
</sp:InitiatorToken>
<sp:RecipientToken>
<wsp:Policy>
<sp:X509Token
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Never">
<wsp:Policy>
<sp:RequireThumbprintReference/>
<sp:WssX509V3Token10/>
</wsp:Policy>
</sp:X509Token>
</wsp:Policy>
</sp:RecipientToken>
<sp:AlgorithmSuite>
<wsp:Policy>
<sp:Basic256/>
</wsp:Policy>
</sp:AlgorithmSuite>
<sp:Layout>
<wsp:Policy>
<sp:Strict/>
</wsp:Policy>
</sp:Layout>
<sp:IncludeTimestamp/>
<sp:OnlySignEntireHeadersAndBody/>
</wsp:Policy>
</sp:AsymmetricBinding>
<sp:Wss10 xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
<wsp:Policy>
<sp:MustSupportRefKeyIdentifier/>
<sp:MustSupportRefIssuerSerial/>
</wsp:Policy>
</sp:Wss10>
<sp:SignedParts xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy">
<sp:Body/>
</sp:SignedParts>
</wsp:All>
</wsp:ExactlyOne>
</wsp:Policy>
</service>
<parameter name="hiddenService" locked="true">true</parameter>
</serviceGroup>