Enhance RProxy authorization to use request method
[aaf/cadi.git] / sidecar / rproxy / config / auth / uri-authorization.json
1  [
2     {
3       "uri": "\/not\/allowed\/at\/all$",
4       "permissions": [
5         "test.auth.access\\|not\\|granted"
6        ]
7     },
8     {
9       "uri": "\/single\/permission\/required$",
10       "method": "GET",
11       "permissions": [
12         "test.single.access\\|single\\|permission"
13        ]
14     },    
15     {
16       "uri": "\/single\/permission\/required$",
17       "method": "PUT|POST",
18       "permissions": [
19         "test.single.access\\|single\\|permission"
20        ]
21     },
22     {
23       "uri": "\/multiple\/permissions\/required$",
24       "permissions": [
25         "test.multiple.access\\|first\\|permission",
26         "test.multiple.access\\|second\\|permission",
27         "test.multiple.access\\|third\\|permission"
28        ]
29     },
30     {
31       "uri": "\/multiple\/permissions\/required/one/missing$",
32       "permissions": [
33         "test.multiple.access\\|first\\|permission",
34         "test.multiple.access\\|second\\|permission",
35         "test.multiple.access\\|third\\|permission",
36         "test.multiple.access\\|fourth\\|permission"
37        ]
38     },
39         {
40       "uri": "\/wildcard\/permission\/granted$",
41       "permissions": [
42         "test.wildcard.access\\|first\\|permission",
43         "test.wildcard.access\\|second\\|permission",
44         "test.wildcard.access\\|third\\|consent"
45        ]
46     },
47     {
48       "uri": "\/instance\/wildcard\/permission\/granted$",
49       "permissions": [
50         "test.wildcard.access\\|first\\|permission",
51         "test.wildcard.access\\|second\\|permission",
52         "test.wildcard.access\\|third\\|permission"
53        ]
54     },
55         {
56       "uri": "\/action\/wildcard\/permission\/granted$",
57       "permissions": [
58         "test.wildcard.access\\|first\\|permission",
59         "test.wildcard.access\\|first\\|permission",
60         "test.wildcard.access\\|first\\|consent"
61        ]
62     },    
63     {
64       "uri": "\/services\/getAAFRequest$",
65       "permissions": [
66         "test.auth.access\\|services\\|GET,PUT"
67        ]
68     },
69     {
70       "uri": "\/admin\/getAAFRequest$",
71       "permissions": [
72         "test.auth.access\\|admin\\|GET,PUT,POST"
73        ]
74     },
75     {
76       "uri": "\/service\/aai\/webapp\/index.html$",
77       "permissions": [
78         "test.auth.access\\|services\\|GET,PUT"
79        ]
80     },    
81     {
82       "uri": "\/services\/aai\/webapp\/index.html$",
83       "permissions": [
84         "test.auth.access\\|services\\|GET,PUT"
85        ]
86     },    
87     {
88       "uri": "\/$",
89       "permissions": [
90         "\\|services\\|GET",
91         "test\\.auth\\.access\\|services\\|GET,PUT"
92        ]
93     },    
94     {
95       "uri": "\/aai\/v13\/cloud-infrastructure\/cloud-regions$",
96       "permissions": [
97         "test\\.auth\\.access\\|rest\\|write",
98         "test\\.auth\\.access\\|rpc\\|write"        
99        ]
100     },
101     {
102       "uri": "\/aai\/v13\/cloud-infrastructure\/cloud-regions\/cloud-region\/[^\/]+[\/][^\/]+$*",
103       "method": "GET",
104       "permissions": [
105         "test.auth.access\\|clouds\\|read",
106         "test.auth.access\\|tenants\\|read"
107       ]     
108     },
109     {
110       "uri": "\/aai\/v13\/cloud-infrastructure\/cloud-regions\/cloud-region\/[^\/]+[\/][^\/]+\/tenants/tenant/[^\/]+/vservers/vserver/[^\/]+$",
111       "permissions": [
112         "test.auth.access\\|clouds\\|read",
113         "test.auth.access\\|tenants\\|read",
114         "test.auth.access\\|vservers\\|read"
115       ]     
116     }
117   ]