From: Jesse McConnell <jmcconnell@apache.org>
Date: Thu, 7 Sep 2006 16:55:55 +0000 (+0000)
Subject: small example authz file that lets me test authz with a user on a page
X-Git-Tag: archiva-0.9-alpha-1~587
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=cd5c7d2a7219fbe3d5120dfc22c3a5974df8d885;p=archiva.git

small example authz file that lets me test authz with a user on a page

git-svn-id: https://svn.apache.org/repos/asf/maven/archiva/trunk@441141 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/archiva-webapp/rbac-store-model.xml b/archiva-webapp/rbac-store-model.xml
index 5923107bb..611c0e4c8 100644
--- a/archiva-webapp/rbac-store-model.xml
+++ b/archiva-webapp/rbac-store-model.xml
@@ -1 +1,130 @@
-<model/>
+<model>
+  <roles>
+    <role>
+      <id>1</id>
+      <name>Base</name>
+      <description>Permissions common to all roles.</description>
+      <assignable>false</assignable>
+      <permissions>
+        <permission>
+          <id>100</id>
+          <name>Modify Myself</name>
+          <operation>
+            <id>1000</id>
+            <name>modify-user</name>
+            <resourceRequired>true</resourceRequired>
+            <resource>
+              <identifier>USERNAME</identifier>
+              <pattern>false</pattern>
+            </resource>
+          </operation>
+        </permission>
+      </permissions>
+    </role>
+    <role>
+      <id>2</id>
+      <name>Administrator</name>
+      <description>Site Administrator</description>
+      <assignable>true</assignable>
+      <permissions>
+        <permission>
+          <id>101</id>
+          <name>Regenerate Index</name>
+          <operation>
+            <id>1001</id>
+            <name>regenerate-index</name>
+            <resourceRequired>false</resourceRequired>
+          </operation>
+        </permission>
+        <permission>
+          <id>102</id>
+          <name>Modify All Users</name>
+          <operation>
+            <id>1002</id>
+            <name>modify-all-users</name>
+            <resourceRequired>false</resourceRequired>
+          </operation>
+        </permission>
+      </permissions>
+      <roles>
+        <role>
+          <id>1</id>
+          <name>Base</name>
+          <description>Permissions common to all roles.</description>
+          <assignable>false</assignable>
+          <permissions>
+            <permission>
+              <id>100</id>
+              <name>Modify Myself</name>
+              <operation>
+                <id>1000</id>
+                <name>modify-user</name>
+                <resourceRequired>true</resourceRequired>
+                <resource>
+                  <identifier>USERNAME</identifier>
+                  <pattern>false</pattern>
+                </resource>
+              </operation>
+            </permission>
+          </permissions>
+        </role>
+      </roles>
+    </role>
+  </roles>
+  <assignments>
+    <assignment>
+      <principal>admin</principal>
+      <roles>
+        <role>
+      <id>2</id>
+      <name>Administrator</name>
+      <description>Site Administrator</description>
+      <assignable>true</assignable>
+      <permissions>
+        <permission>
+          <id>101</id>
+          <name>Regenerate Index</name>
+          <operation>
+            <id>1001</id>
+            <name>regenerate-index</name>
+            <resourceRequired>false</resourceRequired>
+          </operation>
+        </permission>
+        <permission>
+          <id>102</id>
+          <name>Modify All Users</name>
+          <operation>
+            <id>1002</id>
+            <name>modify-all-users</name>
+            <resourceRequired>false</resourceRequired>
+          </operation>
+        </permission>
+      </permissions>
+      <roles>
+        <role>
+          <id>1</id>
+          <name>Base</name>
+          <description>Permissions common to all roles.</description>
+          <assignable>false</assignable>
+          <permissions>
+            <permission>
+              <id>100</id>
+              <name>Modify Myself</name>
+              <operation>
+                <id>1000</id>
+                <name>modify-user</name>
+                <resourceRequired>true</resourceRequired>
+                <resource>
+                  <identifier>USERNAME</identifier>
+                  <pattern>false</pattern>
+                </resource>
+              </operation>
+            </permission>
+          </permissions>
+        </role>
+      </roles>
+    </role>
+      </roles>
+    </assignment>
+  </assignments>
+</model>