gCubeSystem
/
ansible-role-conductor-workflows-user-management
16
0
Fork 0
Code Issues Pull Requests Releases 5 Wiki Activity

finalization of new permission with policies

This commit is contained in:
dcore94 2021-03-03 20:09:01 +01:00
parent 0bcbba23c7
commit b99719a63d
1 changed files with 430 additions and 113 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

345
templates/group_created.json.j2
View File

@ -331,7 +331,8 @@
} }
} }
], ],
[{ [
{
"name" : "pyrest", "name" : "pyrest",
"taskReferenceName" : "create_role_catalogueadmin", "taskReferenceName" : "create_role_catalogueadmin",
"type" : "SIMPLE", "type" : "SIMPLE",
@ -346,8 +347,49 @@
"Content-Type" : "application/json" "Content-Type" : "application/json"
} }
} }
}], },
[{ {
"name" : "pyrest",
"taskReferenceName" : "get_back_role_catalogueadmin",
"type" : "SIMPLE",
"inputParameters" : {
"url" : "${create_role_catalogueadmin.output.headers.location}",
"method" : "GET",
"headers" : {
"Authorization" : "Bearer ${authorize.output.body.access_token}",
"Accept" : "application/json"
}
}
},
{
"name" : "pyrest",
"taskReferenceName" : "create_role_policy_catalogueadmin",
"type" : "SIMPLE",
"inputParameters" : {
"url" : "${init.input.keycloak_admin}/clients/${extract_client_id.output.result.client_id}/authz/resource-server/policy/role",
"body" : {
"name": "Catalogue-Admin_policy",
"description": "",
"type" : "role",
"logic": "POSITIVE",
"decisionStrategy": "UNANIMOUS",
"roles" : [
{
"id" : "${get_back_role_catalogueadmin.output.body.id}",
"required" : true
}
]
},
"method" : "POST",
"headers" : {
"Authorization" : "Bearer ${authorize.output.body.access_token}",
"Content-Type" : "application/json"
}
}
}
],
[
{
"name" : "pyrest", "name" : "pyrest",
"taskReferenceName" : "create_role_catalogueeditor", "taskReferenceName" : "create_role_catalogueeditor",
"type" : "SIMPLE", "type" : "SIMPLE",
@ -362,8 +404,49 @@
"Content-Type" : "application/json" "Content-Type" : "application/json"
} }
} }
}], },
[{ {
"name" : "pyrest",
"taskReferenceName" : "get_back_role_catalogueeditor",
"type" : "SIMPLE",
"inputParameters" : {
"url" : "${create_role_catalogueeditor.output.headers.location}",
"method" : "GET",
"headers" : {
"Authorization" : "Bearer ${authorize.output.body.access_token}",
"Accept" : "application/json"
}
}
},
{
"name" : "pyrest",
"taskReferenceName" : "create_role_policy_catalogueeditor",
"type" : "SIMPLE",
"inputParameters" : {
"url" : "${init.input.keycloak_admin}/clients/${extract_client_id.output.result.client_id}/authz/resource-server/policy/role",
"body" : {
"name": "Catalogue-Editor_policy",
"description": "",
"type" : "role",
"logic": "POSITIVE",
"decisionStrategy": "UNANIMOUS",
"roles" : [
{
"id" : "${get_back_role_catalogueeditor.output.body.id}",
"required" : true
}
]
},
"method" : "POST",
"headers" : {
"Authorization" : "Bearer ${authorize.output.body.access_token}",
"Content-Type" : "application/json"
}
}
}
],
[
{
"name" : "pyrest", "name" : "pyrest",
"taskReferenceName" : "create_role_datamanager", "taskReferenceName" : "create_role_datamanager",
"type" : "SIMPLE", "type" : "SIMPLE",
@ -378,8 +461,49 @@
"Content-Type" : "application/json" "Content-Type" : "application/json"
} }
} }
}], },
[{ {
"name" : "pyrest",
"taskReferenceName" : "get_back_role_datamanager",
"type" : "SIMPLE",
"inputParameters" : {
"url" : "${create_role_datamanager.output.headers.location}",
"method" : "GET",
"headers" : {
"Authorization" : "Bearer ${authorize.output.body.access_token}",
"Accept" : "application/json"
}
}
},
{
"name" : "pyrest",
"taskReferenceName" : "create_role_policy_datamanager",
"type" : "SIMPLE",
"inputParameters" : {
"url" : "${init.input.keycloak_admin}/clients/${extract_client_id.output.result.client_id}/authz/resource-server/policy/role",
"body" : {
"name": "Data-Manager_policy",
"description": "",
"type" : "role",
"logic": "POSITIVE",
"decisionStrategy": "UNANIMOUS",
"roles" : [
{
"id" : "${get_back_role_datamanager.output.body.id}",
"required" : true
}
]
},
"method" : "POST",
"headers" : {
"Authorization" : "Bearer ${authorize.output.body.access_token}",
"Content-Type" : "application/json"
}
}
}
],
[
{
"name" : "pyrest", "name" : "pyrest",
"taskReferenceName" : "create_role_dataminermanager", "taskReferenceName" : "create_role_dataminermanager",
"type" : "SIMPLE", "type" : "SIMPLE",
@ -394,8 +518,49 @@
"Content-Type" : "application/json" "Content-Type" : "application/json"
} }
} }
}], },
[{ {
"name" : "pyrest",
"taskReferenceName" : "get_back_role_dataminermanager",
"type" : "SIMPLE",
"inputParameters" : {
"url" : "${create_role_dataminermanager.output.headers.location}",
"method" : "GET",
"headers" : {
"Authorization" : "Bearer ${authorize.output.body.access_token}",
"Accept" : "application/json"
}
}
},
{
"name" : "pyrest",
"taskReferenceName" : "create_role_policy_dataminermanager",
"type" : "SIMPLE",
"inputParameters" : {
"url" : "${init.input.keycloak_admin}/clients/${extract_client_id.output.result.client_id}/authz/resource-server/policy/role",
"body" : {
"name": "DataMiner-Manager_policy",
"description": "",
"type" : "role",
"logic": "POSITIVE",
"decisionStrategy": "UNANIMOUS",
"roles" : [
{
"id" : "${get_back_role_dataminermanager.output.body.id}",
"required" : true
}
]
},
"method" : "POST",
"headers" : {
"Authorization" : "Bearer ${authorize.output.body.access_token}",
"Content-Type" : "application/json"
}
}
}
],
[
{
"name" : "pyrest", "name" : "pyrest",
"taskReferenceName" : "create_role_voadmin", "taskReferenceName" : "create_role_voadmin",
"type" : "SIMPLE", "type" : "SIMPLE",
@ -410,8 +575,49 @@
"Content-Type" : "application/json" "Content-Type" : "application/json"
} }
} }
}], },
[{ {
"name" : "pyrest",
"taskReferenceName" : "get_back_role_voadmin",
"type" : "SIMPLE",
"inputParameters" : {
"url" : "${create_role_voadmin.output.headers.location}",
"method" : "GET",
"headers" : {
"Authorization" : "Bearer ${authorize.output.body.access_token}",
"Accept" : "application/json"
}
}
},
{
"name" : "pyrest",
"taskReferenceName" : "create_role_policy_voadmin",
"type" : "SIMPLE",
"inputParameters" : {
"url" : "${init.input.keycloak_admin}/clients/${extract_client_id.output.result.client_id}/authz/resource-server/policy/role",
"body" : {
"name": "VO-Admin_policy",
"description": "",
"type" : "role",
"logic": "POSITIVE",
"decisionStrategy": "UNANIMOUS",
"roles" : [
{
"id" : "${get_back_role_voadmin.output.body.id}",
"required" : true
}
]
},
"method" : "POST",
"headers" : {
"Authorization" : "Bearer ${authorize.output.body.access_token}",
"Content-Type" : "application/json"
}
}
}
],
[
{
"name" : "pyrest", "name" : "pyrest",
"taskReferenceName" : "create_role_vredesigner", "taskReferenceName" : "create_role_vredesigner",
"type" : "SIMPLE", "type" : "SIMPLE",
@ -426,8 +632,49 @@
"Content-Type" : "application/json" "Content-Type" : "application/json"
} }
} }
}], },
[{ {
"name" : "pyrest",
"taskReferenceName" : "get_back_role_vredesigner",
"type" : "SIMPLE",
"inputParameters" : {
"url" : "${create_role_vredesigner.output.headers.location}",
"method" : "GET",
"headers" : {
"Authorization" : "Bearer ${authorize.output.body.access_token}",
"Accept" : "application/json"
}
}
},
{
"name" : "pyrest",
"taskReferenceName" : "create_role_policy_vredesigner",
"type" : "SIMPLE",
"inputParameters" : {
"url" : "${init.input.keycloak_admin}/clients/${extract_client_id.output.result.client_id}/authz/resource-server/policy/role",
"body" : {
"name": "VRE-Designer_policy",
"description": "",
"type" : "role",
"logic": "POSITIVE",
"decisionStrategy": "UNANIMOUS",
"roles" : [
{
"id" : "${get_back_role_vredesigner.output.body.id}",
"required" : true
}
]
},
"method" : "POST",
"headers" : {
"Authorization" : "Bearer ${authorize.output.body.access_token}",
"Content-Type" : "application/json"
}
}
}
],
[
{
"name" : "pyrest", "name" : "pyrest",
"taskReferenceName" : "create_role_vremanager", "taskReferenceName" : "create_role_vremanager",
"type" : "SIMPLE", "type" : "SIMPLE",
@ -442,13 +689,83 @@
"Content-Type" : "application/json" "Content-Type" : "application/json"
} }
} }
}] },
{
"name" : "pyrest",
"taskReferenceName" : "get_back_role_vremanager",
"type" : "SIMPLE",
"inputParameters" : {
"url" : "${create_role_vremanager.output.headers.location}",
"method" : "GET",
"headers" : {
"Authorization" : "Bearer ${authorize.output.body.access_token}",
"Accept" : "application/json"
}
}
},
{
"name" : "pyrest",
"taskReferenceName" : "create_role_policy_vremanager",
"type" : "SIMPLE",
"inputParameters" : {
"url" : "${init.input.keycloak_admin}/clients/${extract_client_id.output.result.client_id}/authz/resource-server/policy/role",
"body" : {
"name": "VRE-Manager_policy",
"description": "",
"type" : "role",
"logic": "POSITIVE",
"decisionStrategy": "UNANIMOUS",
"roles" : [
{
"id" : "${get_back_role_vremanager.output.body.id}",
"required" : true
}
]
},
"method" : "POST",
"headers" : {
"Authorization" : "Bearer ${authorize.output.body.access_token}",
"Content-Type" : "application/json"
}
}
}
]
] ]
}, },
{ {
"name" : "join", "name" : "join",
"taskReferenceName" : "join_role_creation", "taskReferenceName" : "join_role_creation",
"type" : "JOIN" "type" : "JOIN"
},
{
"name" : "pyrest",
"taskReferenceName" : "finalize_permission",
"type" : "SIMPLE",
"inputParameters" : {
"url" : "${init.input.keycloak_admin}/clients/${extract_client_id.output.result.client_id}/authz/resource-server/permission/resource",
"body" : {
"name": "Default Permission",
"description": "",
"type" : "resource",
"logic": "POSITIVE",
"decisionStrategy": "AFFIRMATIVE",
"policies" : [
"${create_role_policy_accountingmanager.output.body.id}",
"${create_role_policy_catalogueadmin.output.body.id}",
"${create_role_policy_catalogueeditor.output.body.id}",
"${create_role_policy_datamanager.output.body.id}",
"${create_role_policy_dataminermanager.output.body.id}",
"${create_role_policy_voadmin.output.body.id}",
"${create_role_policy_vredesigner.output.body.id}",
"${create_role_policy_vremanager.output.body.id}"
]
},
"method" : "PUT",
"headers" : {
"Authorization" : "Bearer ${authorize.output.body.access_token}",
"Content-Type" : "application/json"
}
}
} }
] ]
} }