MaDgiK-CITE
/
argos
13
0
Fork 0
Code Issues Pull Requests Projects Releases 3 Wiki Activity

permission changes

This commit is contained in:
amentis 2024-06-04 14:07:45 +03:00
parent 9695e32c17
commit 3a6b648bff
6 changed files with 50 additions and 172 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
annotation-service/annotation-web/src/main/resources/config/permissions.yml
View File

@ -56,9 +56,6 @@ permissions:
BrowseAnnotation: BrowseAnnotation:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
entityAffiliated: true entityAffiliated: true
clients: [ ] clients: [ ]
@ -67,9 +64,6 @@ permissions:
NewAnnotation: NewAnnotation:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
entityAffiliated: true entityAffiliated: true
clients: [ ] clients: [ ]
@ -78,9 +72,6 @@ permissions:
EditAnnotation: EditAnnotation:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: true allowAnonymous: true
@ -88,9 +79,6 @@ permissions:
DeleteAnnotation: DeleteAnnotation:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
entityAffiliated: false entityAffiliated: false
clients: [ ] clients: [ ]

9
backend/core/src/main/java/org/opencdmp/authorization/AuthorizationProperties.java
View File

@ -9,6 +9,7 @@ import java.util.List;
public class AuthorizationProperties { public class AuthorizationProperties {
private List<String> globalAdminRoles; private List<String> globalAdminRoles;
private String adminRole;
private String tenantAdminRole; private String tenantAdminRole;
private String globalUserRole; private String globalUserRole;
private String tenantUserRole; private String tenantUserRole;
@ -24,6 +25,14 @@ public class AuthorizationProperties {
this.globalAdminRoles = globalAdminRoles; this.globalAdminRoles = globalAdminRoles;
} }
public String getAdminRole() {
return adminRole;
}
public void setAdminRole(String adminRole) {
this.adminRole = adminRole;
}
public String getTenantAdminRole() { public String getTenantAdminRole() {
return this.tenantAdminRole; return this.tenantAdminRole;
} }

6
backend/core/src/main/java/org/opencdmp/service/tenant/TenantServiceImpl.java
View File

@ -185,7 +185,11 @@ public class TenantServiceImpl implements TenantService {
item.setId(UUID.randomUUID()); item.setId(UUID.randomUUID());
item.setUserId(userId); item.setUserId(userId);
item.setTenantId(tenant.getId()); item.setTenantId(tenant.getId());
item.setRole(this.authorizationProperties.getTenantAdminRole()); if (existingItems.stream().filter(x -> x.getUserId().equals(userId) && x.getRole().equals(this.authorizationProperties.getAdminRole())).findFirst().orElse(null) != null){
item.setRole(this.authorizationProperties.getTenantAdminRole()); // admin
} else {
item.setRole(this.authorizationProperties.getTenantUserRole()); // installation admin
}
item.setCreatedAt(Instant.now()); item.setCreatedAt(Instant.now());
this.entityManager.persist(item); this.entityManager.persist(item);
keycloakIdsToAddToTenantGroup.add(userCredential.getExternalId()); keycloakIdsToAddToTenantGroup.add(userCredential.getExternalId());

1
backend/web/src/main/resources/config/authorization.yml
View File

@ -2,6 +2,7 @@ authorization:
globalAdminRoles: globalAdminRoles:
- Admin - Admin
- InstallationAdmin - InstallationAdmin
adminRole: Admin
tenantAdminRole: TenantAdmin tenantAdminRole: TenantAdmin
globalUserRole: User globalUserRole: User
tenantUserRole: TenantUser tenantUserRole: TenantUser

190
backend/web/src/main/resources/config/permissions.yml
View File

@ -6,8 +6,8 @@ permissions:
roles: roles:
- TenantAdmin - TenantAdmin
- TenantUser - TenantUser
- TenantManager - TenantPlanManager
- TenantDescriptionTemplateEditor - TenantConfigManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
allowAuthenticated: false allowAuthenticated: false
@ -94,9 +94,6 @@ permissions:
BrowseDeposit: BrowseDeposit:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -104,9 +101,6 @@ permissions:
EditDeposit: EditDeposit:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -120,6 +114,7 @@ permissions:
EditNotificationTemplate: EditNotificationTemplate:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantConfigManager - TenantConfigManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -127,6 +122,7 @@ permissions:
DeleteNotificationTemplate: DeleteNotificationTemplate:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantConfigManager - TenantConfigManager
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -164,6 +160,7 @@ permissions:
EditLanguage: EditLanguage:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantConfigManager - TenantConfigManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -171,6 +168,7 @@ permissions:
DeleteLanguage: DeleteLanguage:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantConfigManager - TenantConfigManager
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -186,9 +184,6 @@ permissions:
BrowseDescription: BrowseDescription:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -202,9 +197,6 @@ permissions:
ReviewDescription: ReviewDescription:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -217,9 +209,6 @@ permissions:
EditDescription: EditDescription:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -231,9 +220,6 @@ permissions:
FinalizeDescription: FinalizeDescription:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -245,9 +231,6 @@ permissions:
DeleteDescription: DeleteDescription:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -260,9 +243,6 @@ permissions:
CloneDescription: CloneDescription:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -281,9 +261,6 @@ permissions:
BrowseTag: BrowseTag:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -291,9 +268,6 @@ permissions:
EditTag: EditTag:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -301,9 +275,6 @@ permissions:
DeleteTag: DeleteTag:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -314,8 +285,6 @@ permissions:
roles: roles:
- Admin - Admin
- InstallationAdmin - InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -346,9 +315,6 @@ permissions:
BrowseDmpAssociatedUser: BrowseDmpAssociatedUser:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -364,9 +330,7 @@ permissions:
BrowseDescriptionTemplateType: BrowseDescriptionTemplateType:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager - TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
- TenantUser - TenantUser
clients: [ ] clients: [ ]
@ -375,6 +339,7 @@ permissions:
EditDescriptionTemplateType: EditDescriptionTemplateType:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantPlanManager - TenantPlanManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -382,6 +347,7 @@ permissions:
DeleteDescriptionTemplateType: DeleteDescriptionTemplateType:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantPlanManager - TenantPlanManager
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -431,6 +397,7 @@ permissions:
EditDescriptionTemplate: EditDescriptionTemplate:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantPlanManager - TenantPlanManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -438,6 +405,7 @@ permissions:
DeleteDescriptionTemplate: DeleteDescriptionTemplate:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantPlanManager - TenantPlanManager
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -446,6 +414,7 @@ permissions:
CloneDescriptionTemplate: CloneDescriptionTemplate:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantPlanManager - TenantPlanManager
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -454,6 +423,7 @@ permissions:
CreateNewVersionDescriptionTemplate: CreateNewVersionDescriptionTemplate:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantPlanManager - TenantPlanManager
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -462,6 +432,7 @@ permissions:
ImportDescriptionTemplate: ImportDescriptionTemplate:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantPlanManager - TenantPlanManager
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -470,6 +441,7 @@ permissions:
ExportDescriptionTemplate: ExportDescriptionTemplate:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantPlanManager - TenantPlanManager
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -479,9 +451,6 @@ permissions:
BrowseDmp: BrowseDmp:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -495,9 +464,6 @@ permissions:
EditDmp: EditDmp:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -519,9 +485,6 @@ permissions:
DeleteDmp: DeleteDmp:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -533,9 +496,6 @@ permissions:
DepositDmp: DepositDmp:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -547,9 +507,6 @@ permissions:
CloneDmp: CloneDmp:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -567,9 +524,6 @@ permissions:
CreateNewVersionDmp: CreateNewVersionDmp:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -581,9 +535,6 @@ permissions:
FinalizeDmp: FinalizeDmp:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -595,9 +546,6 @@ permissions:
UndoFinalizeDmp: UndoFinalizeDmp:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -609,9 +557,6 @@ permissions:
AssignDmpUsers: AssignDmpUsers:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -623,9 +568,6 @@ permissions:
InviteDmpUsers: InviteDmpUsers:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
dmp: dmp:
roles: roles:
@ -649,6 +591,7 @@ permissions:
EditDmpBlueprint: EditDmpBlueprint:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantPlanManager - TenantPlanManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -656,6 +599,7 @@ permissions:
CloneDmpBlueprint: CloneDmpBlueprint:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantPlanManager - TenantPlanManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -663,12 +607,14 @@ permissions:
CreateNewVersionDmpBlueprint: CreateNewVersionDmpBlueprint:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantPlanManager - TenantPlanManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
allowAuthenticated: false allowAuthenticated: false
ExportDmpBlueprint: ExportDmpBlueprint:
roles: roles:
- TenantAdmin
- TenantPlanManager - TenantPlanManager
- Admin - Admin
clients: [ ] clients: [ ]
@ -677,6 +623,7 @@ permissions:
ImportDmpBlueprint: ImportDmpBlueprint:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantPlanManager - TenantPlanManager
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -685,6 +632,7 @@ permissions:
DeleteDmpBlueprint: DeleteDmpBlueprint:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantPlanManager - TenantPlanManager
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -694,9 +642,6 @@ permissions:
BrowseEntityDoi: BrowseEntityDoi:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -704,9 +649,6 @@ permissions:
EditEntityDoi: EditEntityDoi:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -714,9 +656,6 @@ permissions:
DeleteEntityDoi: DeleteEntityDoi:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -728,9 +667,6 @@ permissions:
BrowseReference: BrowseReference:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -753,9 +689,6 @@ permissions:
BrowseDmpReference: BrowseDmpReference:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -763,9 +696,6 @@ permissions:
EditDmpReference: EditDmpReference:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -773,9 +703,6 @@ permissions:
DeleteDmpReference: DeleteDmpReference:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -786,9 +713,6 @@ permissions:
BrowseDmpUser: BrowseDmpUser:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -796,9 +720,6 @@ permissions:
EditDmpUser: EditDmpUser:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -806,9 +727,6 @@ permissions:
DeleteDmpUser: DeleteDmpUser:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -824,12 +742,14 @@ permissions:
- TenantConfigManager - TenantConfigManager
- TenantAdmin - TenantAdmin
- TenantUser - TenantUser
- User
clients: [ ] clients: [ ]
allowAnonymous: yes allowAnonymous: yes
allowAuthenticated: yes allowAuthenticated: yes
EditSupportiveMaterial: EditSupportiveMaterial:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantConfigManager - TenantConfigManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -837,6 +757,7 @@ permissions:
DeleteSupportiveMaterial: DeleteSupportiveMaterial:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantConfigManager - TenantConfigManager
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -858,14 +779,14 @@ permissions:
EditReferenceType: EditReferenceType:
roles: roles:
- Admin - Admin
- TenantPlanManager - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
allowAuthenticated: false allowAuthenticated: false
DeleteReferenceType: DeleteReferenceType:
roles: roles:
- Admin - Admin
- TenantPlanManager - TenantAdmin
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -923,9 +844,6 @@ permissions:
BrowseDmpDescriptionTemplate: BrowseDmpDescriptionTemplate:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -933,9 +851,6 @@ permissions:
EditDmpDescriptionTemplate: EditDmpDescriptionTemplate:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -943,9 +858,6 @@ permissions:
DeleteDmpDescriptionTemplate: DeleteDmpDescriptionTemplate:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -956,9 +868,6 @@ permissions:
BrowseDescriptionReference: BrowseDescriptionReference:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -966,9 +875,6 @@ permissions:
EditDescriptionReference: EditDescriptionReference:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -976,9 +882,6 @@ permissions:
DeleteDescriptionReference: DeleteDescriptionReference:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -989,9 +892,6 @@ permissions:
BrowseDescriptionTag: BrowseDescriptionTag:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -999,9 +899,6 @@ permissions:
EditDescriptionTag: EditDescriptionTag:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -1009,9 +906,6 @@ permissions:
DeleteDescriptionTag: DeleteDescriptionTag:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
@ -1046,11 +940,6 @@ permissions:
EditLock: EditLock:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin
- TenantUser
dmp: dmp:
roles: roles:
- Owner - Owner
@ -1063,11 +952,6 @@ permissions:
DeleteLock: DeleteLock:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin
- TenantUser
dmp: dmp:
roles: roles:
- Owner - Owner
@ -1089,33 +973,21 @@ permissions:
BrowseActionConfirmation: BrowseActionConfirmation:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
- TenantUser
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
allowAuthenticated: false allowAuthenticated: false
EditActionConfirmation: EditActionConfirmation:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
- TenantUser
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
allowAuthenticated: false allowAuthenticated: false
DeleteActionConfirmation: DeleteActionConfirmation:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
- TenantUser
claims: [ ] claims: [ ]
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -1153,6 +1025,7 @@ permissions:
ViewDescriptionTemplateTypePage: ViewDescriptionTemplateTypePage:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantPlanManager - TenantPlanManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -1172,6 +1045,7 @@ permissions:
ViewNotificationTemplatePage: ViewNotificationTemplatePage:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantConfigManager - TenantConfigManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -1179,6 +1053,7 @@ permissions:
ViewSupportiveMaterialPage: ViewSupportiveMaterialPage:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantConfigManager - TenantConfigManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -1186,6 +1061,7 @@ permissions:
ViewLanguagePage: ViewLanguagePage:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantConfigManager - TenantConfigManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -1233,6 +1109,7 @@ permissions:
ViewDescriptionTemplatePage: ViewDescriptionTemplatePage:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantPlanManager - TenantPlanManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -1240,6 +1117,7 @@ permissions:
ViewDmpBlueprintPage: ViewDmpBlueprintPage:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantPlanManager - TenantPlanManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -1257,9 +1135,6 @@ permissions:
ViewMyDescriptionPage: ViewMyDescriptionPage:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
- TenantUser - TenantUser
clients: [ ] clients: [ ]
@ -1268,9 +1143,6 @@ permissions:
ViewMyDmpPage: ViewMyDmpPage:
roles: roles:
- Admin - Admin
- InstallationAdmin
- TenantPlanManager
- TenantConfigManager
- TenantAdmin - TenantAdmin
- TenantUser - TenantUser
clients: [ ] clients: [ ]

4
notification-service/notification-web/src/main/resources/config/permissions.yml
View File

@ -146,6 +146,7 @@ permissions:
ViewNotificationTemplatePage: ViewNotificationTemplatePage:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantConfigManager - TenantConfigManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -155,6 +156,7 @@ permissions:
BrowseNotificationTemplate: BrowseNotificationTemplate:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantConfigManager - TenantConfigManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -162,6 +164,7 @@ permissions:
EditNotificationTemplate: EditNotificationTemplate:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantConfigManager - TenantConfigManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false
@ -169,6 +172,7 @@ permissions:
DeleteNotificationTemplate: DeleteNotificationTemplate:
roles: roles:
- Admin - Admin
- TenantAdmin
- TenantConfigManager - TenantConfigManager
clients: [ ] clients: [ ]
allowAnonymous: false allowAnonymous: false