small example authz file that lets me test authz with a user on a page

git-svn-id: https://svn.apache.org/repos/asf/maven/archiva/trunk@441141 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/archiva-webapp/rbac-store-model.xml b/archiva-webapp/rbac-store-model.xml
index 5923107bb977cebfb90c6f836ace94087ae99a26..611c0e4c8d554a004021e44bcb7cc3e57b3fffc2 100644 (file)
--- a/archiva-webapp/rbac-store-model.xml
+++ b/archiva-webapp/rbac-store-model.xml
@@ -1 +1,130 @@
-<model/>
+<model>
+  <roles>
+    <role>
+      <id>1</id>
+      <name>Base</name>
+      <description>Permissions common to all roles.</description>
+      <assignable>false</assignable>
+      <permissions>
+        <permission>
+          <id>100</id>
+          <name>Modify Myself</name>
+          <operation>
+            <id>1000</id>
+            <name>modify-user</name>
+            <resourceRequired>true</resourceRequired>
+            <resource>
+              <identifier>USERNAME</identifier>
+              <pattern>false</pattern>
+            </resource>
+          </operation>
+        </permission>
+      </permissions>
+    </role>
+    <role>
+      <id>2</id>
+      <name>Administrator</name>
+      <description>Site Administrator</description>
+      <assignable>true</assignable>
+      <permissions>
+        <permission>
+          <id>101</id>
+          <name>Regenerate Index</name>
+          <operation>
+            <id>1001</id>
+            <name>regenerate-index</name>
+            <resourceRequired>false</resourceRequired>
+          </operation>
+        </permission>
+        <permission>
+          <id>102</id>
+          <name>Modify All Users</name>
+          <operation>
+            <id>1002</id>
+            <name>modify-all-users</name>
+            <resourceRequired>false</resourceRequired>
+          </operation>
+        </permission>
+      </permissions>
+      <roles>
+        <role>
+          <id>1</id>
+          <name>Base</name>
+          <description>Permissions common to all roles.</description>
+          <assignable>false</assignable>
+          <permissions>
+            <permission>
+              <id>100</id>
+              <name>Modify Myself</name>
+              <operation>
+                <id>1000</id>
+                <name>modify-user</name>
+                <resourceRequired>true</resourceRequired>
+                <resource>
+                  <identifier>USERNAME</identifier>
+                  <pattern>false</pattern>
+                </resource>
+              </operation>
+            </permission>
+          </permissions>
+        </role>
+      </roles>
+    </role>
+  </roles>
+  <assignments>
+    <assignment>
+      <principal>admin</principal>
+      <roles>
+        <role>
+      <id>2</id>
+      <name>Administrator</name>
+      <description>Site Administrator</description>
+      <assignable>true</assignable>
+      <permissions>
+        <permission>
+          <id>101</id>
+          <name>Regenerate Index</name>
+          <operation>
+            <id>1001</id>
+            <name>regenerate-index</name>
+            <resourceRequired>false</resourceRequired>
+          </operation>
+        </permission>
+        <permission>
+          <id>102</id>
+          <name>Modify All Users</name>
+          <operation>
+            <id>1002</id>
+            <name>modify-all-users</name>
+            <resourceRequired>false</resourceRequired>
+          </operation>
+        </permission>
+      </permissions>
+      <roles>
+        <role>
+          <id>1</id>
+          <name>Base</name>
+          <description>Permissions common to all roles.</description>
+          <assignable>false</assignable>
+          <permissions>
+            <permission>
+              <id>100</id>
+              <name>Modify Myself</name>
+              <operation>
+                <id>1000</id>
+                <name>modify-user</name>
+                <resourceRequired>true</resourceRequired>
+                <resource>
+                  <identifier>USERNAME</identifier>
+                  <pattern>false</pattern>
+                </resource>
+              </operation>
+            </permission>
+          </permissions>
+        </role>
+      </roles>
+    </role>
+      </roles>
+    </assignment>
+  </assignments>
+</model>