Skip to main content.

RBAC Module

Role-Based Access Control (RBAC) Module allows to setup the YencaP access control policy. The RBAC module is bound to the following namespace: urn:loria:madynes:ensuite:yencap:module:RBAC:1.0

<rbac xmlns="urn:loria:madynes:ensuite:yencap:module:RBAC:1.0">
  <users>
    <user id="14">
      <login>alice</login>
      <password>b</password>
      <firstname>Alice</firstname>
      <lastname>Blub</lastname>
      <room>B213</room>
    </user>
    <user id="15">
      <login>netconf</login>
      <password>netconf</password>
      <public-key keytype="rsa">>AAAAB3NzaC1yc2EAAAABIwAAA...P0CDbc350RfDJ6M=</public-key>
      <room>B213</room>
    </user>
  </users>
  <roles>
    <role id="1">
      <name>sysAdmin</name>
      <junior-roles>
        <junior-role roleRef="2"/>
      </junior-roles>
    </role>
    <role id="2">
      <name>netAdmin</name>
      <junior-roles/>
    </role>
  </roles>
  <permissions>
    <permission type="+" id="1" op="rw">
      <scope>/netconf/security/rbac/permissions/permission[@id='5']</scope>
    </permission>
    <permission type="+" id="2" op="rw">
      <scope>/netconf/network/interfaces</scope>
    </permission>
    <permission type="+" id="3" op="rw">
      <scope>/netconf/routing/bgp</scope>
    </permission>
  </permissions>
  <user-assignements>
    <user-assignement roleRef="1" userRef="15" id="1"/>
    <user-assignement roleRef="2" userRef="14" id="2"/>
  </user-assignements>
  <permission-assignements>
    <permission-assignement roleRef="1" permRef="1" id="1"/>
    <permission-assignement roleRef="2" permRef="2" id="2"/>
    <permission-assignement roleRef="2" permRef="3" id="3"/>
  </permission-assignements>
</rbac>