auth/auth-cass/cass_init/minimal.cql

   1 USE authz;
   2
   3 // Create 'org' root NS
   4 INSERT INTO ns (name,description,parent,scope,type)
   5   VALUES('org','Root Namespace','.',1,1);
   6
   7 INSERT INTO role(ns, name, perms, description)
   8   VALUES('org','admin',{'org.access|*|*'},'Org Admins');
   9
  10 INSERT INTO role(ns, name, perms, description)
  11   VALUES('org','owner',{'org.access|*|read,approve'},'Org Owners');
  12
  13 INSERT INTO perm(ns, type, instance, action, roles, description)
  14   VALUES ('org','access','*','read,approve',{'org.owner'},'Org Read Access');
  15
  16 INSERT INTO perm(ns, type, instance, action, roles, description)
  17   VALUES ('org','access','*','*',{'org.admin'},'Org Write Access');
  18
  19
  20 // Create org.osaaf
  21 INSERT INTO ns (name,description,parent,scope,type)
  22   VALUES('org.osaaf','OSAAF Namespace','org',2,2);
  23
  24 INSERT INTO role(ns, name, perms,description)
  25   VALUES('org.osaaf','admin',{'org.osaaf.access|*|*'},'OSAAF Admins');
  26
  27 INSERT INTO perm(ns, type, instance, action, roles,description)
  28   VALUES ('org.osaaf','access','*','*',{'org.osaaf.admin'},'OSAAF Write Access');
  29
  30 INSERT INTO role(ns, name, perms,description)
  31   VALUES('org.osaaf','owner',{'org.osaaf.access|*|read,approve'},'OSAAF Owners');
  32
  33 INSERT INTO perm(ns, type, instance, action, roles,description)
  34   VALUES ('org.osaaf','access','*','read,appove',{'org.osaaf.owner'},'OSAAF Read Access');
  35
  36 // Create org.osaaf.aaf
  37 INSERT INTO ns (name,description,parent,scope,type)
  38   VALUES('org.osaaf.aaf','Application Authorization Framework','org.osaaf',3,3);
  39
  40 INSERT INTO role(ns, name, perms, description)
  41   VALUES('org.osaaf.aaf','admin',{'org.osaaf.aaf.access|*|*'},'AAF Admins');
  42
  43 INSERT INTO perm(ns, type, instance, action, roles, description)
  44   VALUES ('org.osaaf.aaf','access','*','*',{'org.osaaf.aaf.admin'},'AAF Write Access');
  45
  46 INSERT INTO perm(ns, type, instance, action, roles, description)
  47   VALUES ('org.osaaf.aaf','access','*','read,approve',{'org.osaaf.aaf.owner'},'AAF Read Access');
  48
  49 INSERT INTO role(ns, name, perms, description)
  50   VALUES('org.osaaf.aaf','owner',{'org.osaaf.aaf.access|*|read,approve'},'AAF Owners');
  51
  52 // OSAAF Root
  53 INSERT INTO user_role(user,role,expires,ns,rname)
  54   VALUES ('aaf@aaf.osaaf.org','org.admin','2018-10-31','org','admin');
  55
  56 INSERT INTO user_role(user,role,expires,ns,rname)
  57   VALUES ('aaf@aaf.osaaf.org','org.osaaf.aaf.admin','2018-10-31','org.osaaf.aaf','admin');
  58
  59