summaryrefslogtreecommitdiffstats
path: root/base/kra/shared/webapps/kra/WEB-INF/acl.properties
diff options
context:
space:
mode:
authorEndi Sukma Dewata <edewata@redhat.com>2013-02-01 13:05:38 -0500
committerEndi Sukma Dewata <edewata@redhat.com>2013-02-18 14:15:58 -0500
commitba75a144f4c57c0e804fdd6e86eaae40e5822b14 (patch)
tree8e6f482f02a68171b3b49c84dffcb9634fb540ce /base/kra/shared/webapps/kra/WEB-INF/acl.properties
parentdb56da6d015d4fc040d73277c68fea590c5929b7 (diff)
downloadpki-ba75a144f4c57c0e804fdd6e86eaae40e5822b14.tar.gz
pki-ba75a144f4c57c0e804fdd6e86eaae40e5822b14.tar.xz
pki-ba75a144f4c57c0e804fdd6e86eaae40e5822b14.zip
Added configuration file for authentication method validation.ticket-477-6
The auth.properties have been converted into a configuration file to store the list of allowed authentication methods for each REST method. The old auth.properties have been renamed to acl.properties since it's used to store ACL mappings. Ticket #510
Diffstat (limited to 'base/kra/shared/webapps/kra/WEB-INF/acl.properties')
-rw-r--r--base/kra/shared/webapps/kra/WEB-INF/acl.properties12
1 files changed, 12 insertions, 0 deletions
diff --git a/base/kra/shared/webapps/kra/WEB-INF/acl.properties b/base/kra/shared/webapps/kra/WEB-INF/acl.properties
new file mode 100644
index 000000000..952bdad33
--- /dev/null
+++ b/base/kra/shared/webapps/kra/WEB-INF/acl.properties
@@ -0,0 +1,12 @@
+# Restful API authorization mapping info
+#
+# Format:
+# <mapping name> = <resource ID>,<operation>
+# ex: admin.users = certServer.ca.users,read
+
+account.login = certServer.kra.account,login
+account.logout = certServer.kra.account,logout
+admin.users = certServer.kra.users,execute
+admin.groups = certServer.kra.groups,execute
+agent.keys = certServer.kra.keys,execute
+agent.keyrequests = certServer.kra.keyrequests,execute