Enhance RProxy authorization to use request method

[aaf/cadi.git] / sidecar / rproxy / config / auth / uri-authorization.json

diff --git a/sidecar/rproxy/config/auth/uri-authorization.json b/sidecar/rproxy/config/auth/uri-authorization.json
index 29b152d..208db1a 100644 (file)
--- a/sidecar/rproxy/config/auth/uri-authorization.json
+++ b/sidecar/rproxy/config/auth/uri-authorization.json
@@ -7,6 +7,14 @@
     },
     {
       "uri": "\/single\/permission\/required$",
+      "method": "GET",
+      "permissions": [
+        "test.single.access\\|single\\|permission"
+       ]
+    },    
+    {
+      "uri": "\/single\/permission\/required$",
+      "method": "PUT|POST",
       "permissions": [
         "test.single.access\\|single\\|permission"
        ]
@@ -92,6 +100,7 @@
     },
     {
       "uri": "\/aai\/v13\/cloud-infrastructure\/cloud-regions\/cloud-region\/[^\/]+[\/][^\/]+$*",
+      "method": "GET",
       "permissions": [
         "test.auth.access\\|clouds\\|read",
         "test.auth.access\\|tenants\\|read"
@@ -104,11 +113,5 @@
         "test.auth.access\\|tenants\\|read",
         "test.auth.access\\|vservers\\|read"
       ]     
-    },
-    {
-      "uri": "\/rproxy\/.*",
-      "permissions": [
-       "org\\.access\\|rproxy\\|get"
-       ]
     }
   ]
\ No newline at end of file