X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=sfa%2Ftrust%2Frights.py;h=6d7fc85b41e51fcfaef85ef7933c7ec4724f2a83;hb=3d7237fa0b5f2b4a60cb97c7fb3b6aecfd94558a;hp=2e2660f4504a5226dc097d068bb2eed77f0250bd;hpb=1d15635c313f9fe13a977a347382ab716fd4e52b;p=sfa.git diff --git a/sfa/trust/rights.py b/sfa/trust/rights.py index 2e2660f4..6d7fc85b 100644 --- a/sfa/trust/rights.py +++ b/sfa/trust/rights.py @@ -1,5 +1,5 @@ ## -# This Module implements rights and lists of rights for the Geni wrapper. Rights +# This Module implements rights and lists of rights for the SFA. Rights # are implemented by two classes: # # Right - represents a single right @@ -14,17 +14,18 @@ # privilege_table is a list of priviliges and what operations are allowed # per privilege. -privilege_table = {"authority": ["register", "remove", "update", "resolve", "list", "getcredential"], +privilege_table = {"authority": ["register", "remove", "update", "resolve", "list", "getcredential", "*"], "refresh": ["remove", "update"], "resolve": ["resolve", "list", "getcredential"], - "sa": ["getticket", "redeemslice", "createslice", "deleteslice", "updateslice", + "sa": ["getticket", "redeemslice", "redeemticket", "createslice", "deleteslice", "updateslice", "getsliceresources", "getticket", "loanresources", "stopslice", "startslice", "deleteslice", "resetslice", "listslices", "listnodes", "getpolicy"], - "embed": ["getticket", "redeemslice", "createslice", "deleteslice", "updateslice", "getsliceresources"], - "bind": ["getticket", "loanresources"], - "control": ["updateslice", "createslice", "stopslice", "startslice", "deleteslice", "resetslice", "getsliceresources"], + "embed": ["getticket", "redeemslice", "redeemticket", "createslice", "deleteslice", "updateslice", "getsliceresources"], + "bind": ["getticket", "loanresources", "redeemticket"], + "control": ["updateslice", "createslice", "stopslice", "startslice", "deleteslice", "resetslice", "getsliceresources", "getgids"], "info": ["listslices", "listnodes", "getpolicy"], - "ma": ["setbootstate", "getbootstate", "reboot"]} + "ma": ["setbootstate", "getbootstate", "reboot", "getgids", "gettrustedcerts"], + "operator": ["gettrustedcerts", "getgids"]} ##