make authority, sa, and ma rights explicit

[sfa.git] / geni / util / rights.py

diff --git a/geni/util/rights.py b/geni/util/rights.py
index c2af9dc..1e6a8a3 100644 (file)
--- a/geni/util/rights.py
+++ b/geni/util/rights.py
@@ -14,15 +14,15 @@
 # privilege_table is a list of priviliges and what operations are allowed
 # per privilege.
 
-privilege_table = {"authority": ["*"],
+privilege_table = {"authority": ["remove", "update", "resolve", "list", "getcredential"],
                    "refresh": ["remove", "update"],
                    "resolve": ["resolve", "list", "getcredential"],
-                   "sa": ["*"],
+                   "sa": ["getticket", "redeemslice", "createslice", "deleteslice", "updateslice", "getsliceresources", "getticket", "loanresources", "stopslice", "startslice", "deleteslice", "resetslice", "listslices", "listnodes", "getpolicy"],
                    "embed": ["getticket", "redeemslice", "createslice", "deleteslice", "updateslice", "getsliceresources"],
                    "bind": ["getticket", "loanresources"],
                    "control": ["updateslice", "createslice", "stopslice", "startslice", "deleteslice", "resetslice", "getsliceresources"],
-                   "info": ["listslices", "listnodes"],
-                   "ma": ["*"]}
+                   "info": ["listslices", "listnodes", "getpolicy"],
+                   "ma": ["setbootstate", "getbootstate", "reboot"]}
 
 ##
 # The Right class represents a single privilege.