From 7c18a12dda7a82f1c71fd556762fd6f9c54f93f1 Mon Sep 17 00:00:00 2001 From: Nina Kylstad Date: Fri, 22 Mar 2024 08:45:07 +0100 Subject: [PATCH 1/4] suggestion for simplified policy --- src/App/config/authorization/policy.xml | 237 ++++-------------------- 1 file changed, 41 insertions(+), 196 deletions(-) diff --git a/src/App/config/authorization/policy.xml b/src/App/config/authorization/policy.xml index 89db5bac..51cf4b66 100644 --- a/src/App/config/authorization/policy.xml +++ b/src/App/config/authorization/policy.xml @@ -1,26 +1,20 @@ - - + + - A rule giving user with role REGNA or DAGL and the app owner [ORG] the right to instantiate a instance of a given app of [ORG]/[APP] + A rule giving user with role REGNA or DAGL the right to instantiate, read, write and delete an instance of a given app of [ORG]/[APP] - REGNA - + dagl + - DAGL - - - - - - [ORG] - + regna + @@ -28,169 +22,50 @@ [ORG] - + [APP] - - - - - - - - instantiate - - - - - - read - + - - - - Rule that defines that user with role REGNA or DAGL can read and write for [ORG]/[APP] when it is in Task_1 - - REGNA - - - - - - DAGL - - - - - - - - [ORG] - - - - [APP] - - - - Task_1 - - - - - - [ORG] - - - - [APP] - - - - EndEvent_1 - - - - - - - read - - - - - - write - + - - - - - Rule that defines that user with role REGNA or DAGL can delete instances of [ORG]/[APP] - - - REGNA - + write + - DAGL - - - - - - - - [ORG] - - - - [APP] - - - delete - - - - - - - - Rule that defines that org can write to instances of [ORG]/[APP] for any states - - - - - [ORG] - - - - - - - - [ORG] - - - - [APP] - + - - - - write - + + instantiate + - - Rule that defines that org can complete an instance of [ORG]/[APP] which state is at the end event. + + A rule giving the app owner [ORG] the right to instantiate, read, write and complete an instance of a given app of [ORG]/[APP] - - [ORG] - + + [org] + @@ -198,82 +73,52 @@ [ORG] - + [APP] - - - - EndEvent_1 - + - - - - complete - - - - - - - - A rule giving user with role REGNA or DAGL and the app owner [ORG] the right to read the appresource events of a given app of [ORG]/[APP] - - REGNA - + read + - DAGL - - - - - - [ORG] - + write + - - - - [ORG] - - - - [APP] - - - - events - + + instantiate + - - - - read - + + complete + - + - 2 + 3 + + + + + 3 - + \ No newline at end of file From 39277323ddfadf11d0fdacdf3e90c6d40f5ae435 Mon Sep 17 00:00:00 2001 From: Nina Kylstad Date: Fri, 22 Mar 2024 08:52:51 +0100 Subject: [PATCH 2/4] add empty line at eof --- src/App/config/authorization/policy.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/App/config/authorization/policy.xml b/src/App/config/authorization/policy.xml index 51cf4b66..ef66fe04 100644 --- a/src/App/config/authorization/policy.xml +++ b/src/App/config/authorization/policy.xml @@ -121,4 +121,4 @@ - \ No newline at end of file + From cca192ee4ad3ce383c0994238ce06088e0c66eae Mon Sep 17 00:00:00 2001 From: Nina Kylstad Date: Fri, 22 Mar 2024 12:14:45 +0100 Subject: [PATCH 3/4] update policy and rule ids --- src/App/config/authorization/policy.xml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/App/config/authorization/policy.xml b/src/App/config/authorization/policy.xml index ef66fe04..29daf715 100644 --- a/src/App/config/authorization/policy.xml +++ b/src/App/config/authorization/policy.xml @@ -1,7 +1,7 @@ - + - + A rule giving user with role REGNA or DAGL the right to instantiate, read, write and delete an instance of a given app of [ORG]/[APP] @@ -58,13 +58,13 @@ - + A rule giving the app owner [ORG] the right to instantiate, read, write and complete an instance of a given app of [ORG]/[APP] - [org] + [ORG] From d910f4f3f8c1170727cf7436292765ab9a7438ed Mon Sep 17 00:00:00 2001 From: Nina Kylstad Date: Fri, 22 Mar 2024 12:22:19 +0100 Subject: [PATCH 4/4] swap regna for priv role --- src/App/config/authorization/policy.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/App/config/authorization/policy.xml b/src/App/config/authorization/policy.xml index 29daf715..74998956 100644 --- a/src/App/config/authorization/policy.xml +++ b/src/App/config/authorization/policy.xml @@ -13,7 +13,7 @@ - regna + priv