RBAC Module
Role-Based Access Control (RBAC) Module allows to setup the YencaP access control policy. The RBAC module is bound to the following namespace: urn:loria:madynes:ensuite:yencap:module:RBAC:1.0
<rbac xmlns="urn:loria:madynes:ensuite:yencap:module:RBAC:1.0"> <users> <user id="14"> <login>alice</login> <password>b</password> <firstname>Alice</firstname> <lastname>Blub</lastname> <room>B213</room> </user> <user id="15"> <login>netconf</login> <password>netconf</password> <public-key keytype="rsa">>AAAAB3NzaC1yc2EAAAABIwAAA...P0CDbc350RfDJ6M=</public-key> <room>B213</room> </user> </users> <roles> <role id="1"> <name>sysAdmin</name> <junior-roles> <junior-role roleRef="2"/> </junior-roles> </role> <role id="2"> <name>netAdmin</name> <junior-roles/> </role> </roles> <permissions> <permission type="+" id="1" op="rw"> <scope>/netconf/security/rbac/permissions/permission[@id='5']</scope> </permission> <permission type="+" id="2" op="rw"> <scope>/netconf/network/interfaces</scope> </permission> <permission type="+" id="3" op="rw"> <scope>/netconf/routing/bgp</scope> </permission> </permissions> <user-assignements> <user-assignement roleRef="1" userRef="15" id="1"/> <user-assignement roleRef="2" userRef="14" id="2"/> </user-assignements> <permission-assignements> <permission-assignement roleRef="1" permRef="1" id="1"/> <permission-assignement roleRef="2" permRef="2" id="2"/> <permission-assignement roleRef="2" permRef="3" id="3"/> </permission-assignements> </rbac> |