using System; using System.Collections.Generic; using AyaNova.Biz; namespace AyaNova.Biz { /// /// roles of all business objects /// internal static class BizRoles { static Dictionary roles = new Dictionary(); static BizRoles() { //Add all object roles here //NOTE: do not need to add change roles to read roles, Authorized.cs takes care of that automatically //by assuming if you can change you can read #region All roles initialization //////////////////////////////////////////////////////////// //USER // //TODO: flesh this out more when user routes are made //These rights only apply to the core User object itself //any settings that are user configurable should go under a UserOptions object instead roles.Add(AyaType.User, new BizRoleSet() { Change = AuthorizationRoles.BizAdminFull, EditOwn = AuthorizationRoles.NoRole,//Only biz admin has full rights to edit a user?? Maybe minor changes are allowed or not stored as a User sub field for user configurable things Read = AuthorizationRoles.BizAdminFull | AuthorizationRoles.BizAdminLimited }); //////////////////////////////////////////////////////////// //WIDGET // roles.Add(AyaType.Widget, new BizRoleSet() { Change = AuthorizationRoles.BizAdminFull | AuthorizationRoles.InventoryFull, EditOwn = AuthorizationRoles.TechFull, Read = AuthorizationRoles.BizAdminLimited | AuthorizationRoles.InventoryLimited | AuthorizationRoles.TechFull | AuthorizationRoles.TechLimited | AuthorizationRoles.AccountingFull }); //////////////////////////////////////////////////////////// //SERVERSTATE // roles.Add(AyaType.ServerState, new BizRoleSet() { Change = AuthorizationRoles.OpsAdminFull, EditOwn = AuthorizationRoles.NoRole, Read = AuthorizationRoles.AnyRole }); //////////////////////////////////////////////////////////// //LICENSE // roles.Add(AyaType.License, new BizRoleSet() { Change = AuthorizationRoles.BizAdminFull | AuthorizationRoles.OpsAdminFull, EditOwn = AuthorizationRoles.NoRole, Read = AuthorizationRoles.BizAdminLimited | AuthorizationRoles.OpsAdminLimited }); //////////////////////////////////////////////////////////// //LOGFILE // roles.Add(AyaType.LogFile, new BizRoleSet() { Change = AuthorizationRoles.NoRole, EditOwn = AuthorizationRoles.NoRole, Read = AuthorizationRoles.OpsAdminFull | AuthorizationRoles.OpsAdminLimited }); //////////////////////////////////////////////////////////// //TAG //Full roles can make new tags and can edit or delete existing tags roles.Add(AyaType.Tag, new BizRoleSet() { Change = AuthorizationRoles.BizAdminFull | AuthorizationRoles.DispatchFull | AuthorizationRoles.InventoryFull | AuthorizationRoles.TechFull | AuthorizationRoles.AccountingFull, EditOwn = AuthorizationRoles.NoRole, Read = AuthorizationRoles.AnyRole }); //////////////////////////////////////////////////////////// //TAGMAP //Any roles can tag objects and remove tags as per their rights to the taggable object type in question roles.Add(AyaType.TagMap, new BizRoleSet() { Change = AuthorizationRoles.AnyRole, EditOwn = AuthorizationRoles.NoRole, Read = AuthorizationRoles.AnyRole }); //////////////////////////////////////////////////////////// //OPERATIONS //Only opsfull can change operations //ops and biz admin can view operations roles.Add(AyaType.JobOperations, new BizRoleSet() { Change = AuthorizationRoles.OpsAdminFull, EditOwn = AuthorizationRoles.NoRole, Read = AuthorizationRoles.OpsAdminLimited | AuthorizationRoles.BizAdminFull | AuthorizationRoles.BizAdminLimited }); //////////////////////////////////////////////////////////// //AyaNova7Import //Only opsfull can change operations //opsfull can view operations roles.Add(AyaType.AyaNova7Import, new BizRoleSet() { Change = AuthorizationRoles.OpsAdminFull, EditOwn = AuthorizationRoles.NoRole, Read = AuthorizationRoles.OpsAdminFull }); //////////////////////////////////////////////////////////// //METRICS // roles.Add(AyaType.Metrics, new BizRoleSet() { Change = AuthorizationRoles.NoRole, EditOwn = AuthorizationRoles.NoRole, Read = AuthorizationRoles.OpsAdminFull | AuthorizationRoles.OpsAdminLimited }); //////////////////////////////////////////////////////////// //LOCALE // roles.Add(AyaType.Locale, new BizRoleSet() { Change = AuthorizationRoles.BizAdminFull | AuthorizationRoles.OpsAdminFull, EditOwn = AuthorizationRoles.NoRole, Read = AuthorizationRoles.AnyRole }); //////////////////////////////////////////////////////////////////// #endregion all roles init }//end of constructor /// /// Get roleset for biz object /// /// /// internal static BizRoleSet GetRoleSet(AyaType forType) { if (roles.ContainsKey(forType)) { return roles[forType]; } else { return null; } } }//end of class }//eons