mirror of
https://gitlab.com/fabinfra/fabaccess/demos-environments/showcase.git
synced 2025-03-12 14:51:41 +01:00
Fix user manage roles
This commit is contained in:
parent
0880da4707
commit
8e85e0d5e5
@ -73,6 +73,14 @@
|
||||
]
|
||||
},
|
||||
|
||||
ManageUsers = {
|
||||
permission = [
|
||||
"bffh.users.info",
|
||||
"bffh.users.manage",
|
||||
"bffh.users.admin"
|
||||
]
|
||||
},
|
||||
|
||||
ManageA = {
|
||||
permissions = [ "TestEnv.Manage.A" ]
|
||||
},
|
||||
|
@ -1,59 +1,59 @@
|
||||
[Admin1]
|
||||
roles = ["Admin", "bffh.users.info", "bffh.users.manage", "bffh.users.admin"]
|
||||
roles = ["Admin", "ManageUsers"]
|
||||
passwd = "secret"
|
||||
noot = "noot!"
|
||||
cardkey = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
||||
|
||||
[Admin2]
|
||||
roles = ["Admin", "bffh.users.info", "bffh.users.manage", "bffh.users.admin"]
|
||||
roles = ["Admin", "ManageUsers"]
|
||||
passwd = "secret"
|
||||
noot = "noot!"
|
||||
cardkey = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
||||
|
||||
[ManagerA1]
|
||||
roles = ["ManageA", "UseA", "ReadA", "DiscloseA", "bffh.users.info", "bffh.users.manage", "bffh.users.admin"]
|
||||
roles = ["ManageA", "UseA", "ReadA", "DiscloseA", "ManageUsers"]
|
||||
passwd = "secret"
|
||||
noot = "noot!"
|
||||
cardkey = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
||||
|
||||
[ManagerA2]
|
||||
roles = ["ManageA", "UseA", "ReadA", "DiscloseA", "bffh.users.info", "bffh.users.manage", "bffh.users.admin"]
|
||||
roles = ["ManageA", "UseA", "ReadA", "DiscloseA", "ManageUsers"]
|
||||
passwd = "secret"
|
||||
noot = "noot!"
|
||||
cardkey = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
||||
|
||||
[ManagerB1]
|
||||
roles = ["ManageB", "UseB", "ReadB", "DiscloseB", "bffh.users.info", "bffh.users.manage", "bffh.users.admin"]
|
||||
roles = ["ManageB", "UseB", "ReadB", "DiscloseB", "ManageUsers"]
|
||||
passwd = "secret"
|
||||
noot = "noot!"
|
||||
cardkey = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
||||
|
||||
[ManagerB2]
|
||||
roles = ["ManageB", "UseB", "ReadB", "DiscloseB", "bffh.users.info", "bffh.users.manage", "bffh.users.admin"]
|
||||
roles = ["ManageB", "UseB", "ReadB", "DiscloseB", "ManageUsers"]
|
||||
passwd = "secret"
|
||||
noot = "noot!"
|
||||
cardkey = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
||||
|
||||
[ManagerC1]
|
||||
roles = ["ManageC", "UseC", "ReadC", "DiscloseC", "bffh.users.info", "bffh.users.manage", "bffh.users.admin"]
|
||||
roles = ["ManageC", "UseC", "ReadC", "DiscloseC", "ManageUsers"]
|
||||
passwd = "secret"
|
||||
noot = "noot!"
|
||||
cardkey = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
||||
|
||||
[ManagerC2]
|
||||
roles = ["ManageC", "UseC", "ReadC", "DiscloseC", "bffh.users.info", "bffh.users.manage", "bffh.users.admin"]
|
||||
roles = ["ManageC", "UseC", "ReadC", "DiscloseC", "ManageUsers"]
|
||||
passwd = "secret"
|
||||
noot = "noot!"
|
||||
cardkey = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
||||
|
||||
[ManagerABC1]
|
||||
roles = ["ManageA", "UseA", "ReadA", "DiscloseA", "ManageB", "UseB", "ReadB", "DiscloseB", "ManageC", "UseC", "ReadC", "DiscloseC", "bffh.users.info", "bffh.users.manage", "bffh.users.admin"]
|
||||
roles = ["ManageA", "UseA", "ReadA", "DiscloseA", "ManageB", "UseB", "ReadB", "DiscloseB", "ManageC", "UseC", "ReadC", "DiscloseC", "ManageUsers"]
|
||||
passwd = "secret"
|
||||
noot = "noot!"
|
||||
cardkey = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
||||
|
||||
[ManagerABC2]
|
||||
roles = ["ManageA", "UseA", "ReadA", "DiscloseA", "ManageB", "UseB", "ReadB", "DiscloseB", "ManageC", "UseC", "ReadC", "DiscloseC", "bffh.users.info", "bffh.users.manage", "bffh.users.admin"]
|
||||
roles = ["ManageA", "UseA", "ReadA", "DiscloseA", "ManageB", "UseB", "ReadB", "DiscloseB", "ManageC", "UseC", "ReadC", "DiscloseC", "ManageUsers]
|
||||
passwd = "secret"
|
||||
noot = "noot!"
|
||||
cardkey = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
||||
|
@ -9,14 +9,14 @@ services:
|
||||
# - "./config/dnsrobocert:/etc/dnsrobocert"
|
||||
|
||||
bffh:
|
||||
image: registry.gitlab.com/fabinfra/fabaccess/bffh:v0.3-pre
|
||||
image: registry.gitlab.com/fabinfra/fabaccess/bffh:v0.3.1-pre
|
||||
pull_policy: always
|
||||
restart: always
|
||||
ports:
|
||||
- "59666:59661"
|
||||
entrypoint: ["sh", "-c", "bffhd -c /etc/bffh/bffh.dhall --load=/etc/bffh/users.toml; bffhd -c /etc/bffh/bffh.dhall"]
|
||||
environment:
|
||||
- "RUST_LOG=debug"
|
||||
- "BFFH_LOG=trace"
|
||||
volumes:
|
||||
# generate a sample config.toml by running "docker run registry.gitlab.com/fabinfra/fabaccess/bffh:dev-latest --print-default > examples/config.toml" from the project root. You may have to delete the ipv6 listen section.
|
||||
- "./config/bffh:/etc/bffh"
|
||||
|
Loading…
x
Reference in New Issue
Block a user