443 lines
10 KiB
JSON
443 lines
10 KiB
JSON
{
|
|
"groups": [
|
|
{
|
|
"capacities": [
|
|
{
|
|
"action": "EVERYTHING",
|
|
"module": "SUPER",
|
|
"object": null,
|
|
"permissions": "lrwx"
|
|
},
|
|
{
|
|
"action": "infrastructure",
|
|
"module": "ADMIN",
|
|
"object": null,
|
|
"permissions": "-rwx"
|
|
},
|
|
{
|
|
"action": "request-audit",
|
|
"module": "LOGIN",
|
|
"object": null,
|
|
"permissions": "-r--"
|
|
},
|
|
{
|
|
"action": "workspaces",
|
|
"module": "STUDIO",
|
|
"object": "/shared",
|
|
"permissions": "lrwx"
|
|
},
|
|
{
|
|
"action": "terminal",
|
|
"module": "STUDIO",
|
|
"object": "/shared",
|
|
"permissions": "---x"
|
|
}
|
|
],
|
|
"description": "Full system administrators.",
|
|
"grid_x": 4,
|
|
"grid_y": 4,
|
|
"members": [
|
|
"superadmin"
|
|
],
|
|
"name": "ADMINS"
|
|
},
|
|
{
|
|
"capacities": [
|
|
{
|
|
"action": "secrets",
|
|
"module": "LOGIN",
|
|
"object": null,
|
|
"permissions": "-r--"
|
|
}
|
|
],
|
|
"description": "Read-only Login vault bootstrap identities.",
|
|
"grid_x": 24,
|
|
"grid_y": 15,
|
|
"members": [
|
|
"venact-boot-admin",
|
|
"venact-boot-studio",
|
|
"venact-boot-compute",
|
|
"venact-boot-mentor"
|
|
],
|
|
"name": "VAULT-BOOT"
|
|
},
|
|
{
|
|
"capacities": [
|
|
{
|
|
"action": "session",
|
|
"module": "LOGIN",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "workspaces",
|
|
"module": "STUDIO",
|
|
"object": "/users/$SELF",
|
|
"permissions": "lrwx"
|
|
},
|
|
{
|
|
"action": "terminal",
|
|
"module": "STUDIO",
|
|
"object": "/users/$SELF",
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "workspaces",
|
|
"module": "STUDIO",
|
|
"object": "/shared",
|
|
"permissions": "l---"
|
|
},
|
|
{
|
|
"action": "sso-clients",
|
|
"module": "LOGIN",
|
|
"object": "/gitea",
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "sso-clients",
|
|
"module": "LOGIN",
|
|
"object": "/git-cntr-d1forgejo",
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "sso-clients",
|
|
"module": "LOGIN",
|
|
"object": "/git-cntr-d2forgejo",
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "sso-clients",
|
|
"module": "LOGIN",
|
|
"object": "/git-cntr-d3forgejo",
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "sso-clients",
|
|
"module": "LOGIN",
|
|
"object": "/git-cntr-d4forgejo",
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "sso-clients",
|
|
"module": "LOGIN",
|
|
"object": "/git-cntr-d5forgejo",
|
|
"permissions": "---x"
|
|
}
|
|
],
|
|
"description": "All authenticated users.",
|
|
"grid_x": 4,
|
|
"grid_y": 15,
|
|
"members": [
|
|
"everyone"
|
|
],
|
|
"name": "EVERYONE"
|
|
},
|
|
{
|
|
"capacities": [
|
|
{
|
|
"action": "skill-chat",
|
|
"module": "MENTOR",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "skill-guide",
|
|
"module": "MENTOR",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "skill-suggest",
|
|
"module": "MENTOR",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "skill-act",
|
|
"module": "MENTOR",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "use-connector",
|
|
"module": "MENTOR",
|
|
"object": "/online",
|
|
"permissions": "l--x"
|
|
}
|
|
],
|
|
"description": "Machine identity for the online (cloud) mentor.",
|
|
"grid_x": 24,
|
|
"grid_y": 4,
|
|
"members": [
|
|
"mentor"
|
|
],
|
|
"name": "MENTORS-ONLINE"
|
|
},
|
|
{
|
|
"capacities": [
|
|
{
|
|
"action": "skill-chat",
|
|
"module": "MENTOR",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "skill-guide",
|
|
"module": "MENTOR",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "skill-suggest",
|
|
"module": "MENTOR",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "skill-act",
|
|
"module": "MENTOR",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "use-connector",
|
|
"module": "MENTOR",
|
|
"object": "/local",
|
|
"permissions": "l--x"
|
|
}
|
|
],
|
|
"description": "Machine identity for the local mentor.",
|
|
"grid_x": 4,
|
|
"grid_y": 29,
|
|
"members": [
|
|
"mentor-local"
|
|
],
|
|
"name": "MENTORS-LOCAL"
|
|
}
|
|
],
|
|
"layout": {},
|
|
"roles": [
|
|
{
|
|
"capacities": [
|
|
{
|
|
"action": "EVERYTHING",
|
|
"module": "SUPER",
|
|
"object": null,
|
|
"permissions": "lrwx"
|
|
},
|
|
{
|
|
"action": "infrastructure",
|
|
"module": "ADMIN",
|
|
"object": null,
|
|
"permissions": "-rwx"
|
|
},
|
|
{
|
|
"action": "request-audit",
|
|
"module": "LOGIN",
|
|
"object": null,
|
|
"permissions": "-r--"
|
|
},
|
|
{
|
|
"action": "workspaces",
|
|
"module": "STUDIO",
|
|
"object": "/shared",
|
|
"permissions": "lrwx"
|
|
},
|
|
{
|
|
"action": "terminal",
|
|
"module": "STUDIO",
|
|
"object": "/shared",
|
|
"permissions": "---x"
|
|
}
|
|
],
|
|
"description": "Full system access.",
|
|
"grid_x": 4,
|
|
"grid_y": 4,
|
|
"members": [
|
|
"superadmin"
|
|
],
|
|
"merged_to_group_name": "ADMINS",
|
|
"name": "ADMINS"
|
|
},
|
|
{
|
|
"capacities": [
|
|
{
|
|
"action": "secrets",
|
|
"module": "LOGIN",
|
|
"object": null,
|
|
"permissions": "-r--"
|
|
}
|
|
],
|
|
"description": "Read-only Login vault bootstrap identities.",
|
|
"grid_x": 24,
|
|
"grid_y": 15,
|
|
"members": [
|
|
"venact-boot-admin",
|
|
"venact-boot-studio",
|
|
"venact-boot-compute",
|
|
"venact-boot-mentor"
|
|
],
|
|
"merged_to_group_name": "VAULT-BOOT",
|
|
"name": "VAULT-BOOT"
|
|
},
|
|
{
|
|
"capacities": [
|
|
{
|
|
"action": "session",
|
|
"module": "LOGIN",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "workspaces",
|
|
"module": "STUDIO",
|
|
"object": "/users/$SELF",
|
|
"permissions": "lrwx"
|
|
},
|
|
{
|
|
"action": "terminal",
|
|
"module": "STUDIO",
|
|
"object": "/users/$SELF",
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "workspaces",
|
|
"module": "STUDIO",
|
|
"object": "/shared",
|
|
"permissions": "l---"
|
|
},
|
|
{
|
|
"action": "sso-clients",
|
|
"module": "LOGIN",
|
|
"object": "/gitea",
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "sso-clients",
|
|
"module": "LOGIN",
|
|
"object": "/git-cntr-d1forgejo",
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "sso-clients",
|
|
"module": "LOGIN",
|
|
"object": "/git-cntr-d2forgejo",
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "sso-clients",
|
|
"module": "LOGIN",
|
|
"object": "/git-cntr-d3forgejo",
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "sso-clients",
|
|
"module": "LOGIN",
|
|
"object": "/git-cntr-d4forgejo",
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "sso-clients",
|
|
"module": "LOGIN",
|
|
"object": "/git-cntr-d5forgejo",
|
|
"permissions": "---x"
|
|
}
|
|
],
|
|
"description": "All authenticated users.",
|
|
"grid_x": 4,
|
|
"grid_y": 15,
|
|
"members": [
|
|
"everyone"
|
|
],
|
|
"merged_to_group_name": "EVERYONE",
|
|
"name": "EVERYONE"
|
|
},
|
|
{
|
|
"capacities": [
|
|
{
|
|
"action": "skill-chat",
|
|
"module": "MENTOR",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "skill-guide",
|
|
"module": "MENTOR",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "skill-suggest",
|
|
"module": "MENTOR",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "skill-act",
|
|
"module": "MENTOR",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "use-connector",
|
|
"module": "MENTOR",
|
|
"object": "/online",
|
|
"permissions": "l--x"
|
|
}
|
|
],
|
|
"description": "Machine identity for the online (cloud) mentor.",
|
|
"grid_x": 24,
|
|
"grid_y": 4,
|
|
"members": [
|
|
"mentor"
|
|
],
|
|
"merged_to_group_name": "MENTORS-ONLINE",
|
|
"name": "MENTORS-ONLINE"
|
|
},
|
|
{
|
|
"capacities": [
|
|
{
|
|
"action": "skill-chat",
|
|
"module": "MENTOR",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "skill-guide",
|
|
"module": "MENTOR",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "skill-suggest",
|
|
"module": "MENTOR",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "skill-act",
|
|
"module": "MENTOR",
|
|
"object": null,
|
|
"permissions": "---x"
|
|
},
|
|
{
|
|
"action": "use-connector",
|
|
"module": "MENTOR",
|
|
"object": "/local",
|
|
"permissions": "l--x"
|
|
}
|
|
],
|
|
"description": "Machine identity for the local mentor.",
|
|
"grid_x": 4,
|
|
"grid_y": 29,
|
|
"members": [
|
|
"mentor-local"
|
|
],
|
|
"merged_to_group_name": "MENTORS-LOCAL",
|
|
"name": "MENTORS-LOCAL"
|
|
}
|
|
],
|
|
"schema_version": 1,
|
|
"stickies": [],
|
|
"user_memberships": []
|
|
}
|