APIPark/resources/access/access.yaml

system:
  - name: workspace
    value: 'workspace'
    children:
      - name: consumer
        value: 'application'
        children:
          - name: view all consumer
            value: 'view_all'
            guest_allow: true
          - name: manager all consumer
            value: "manager_all"
            dependents:
              - system.workspace.consumer.view_all
      - name: service
        value: 'service'
        children:
          - name: view all service
            value: 'view_all'
            guest_allow: true
          - name: manager all consumer
            value: "manager_all"
            dependents:
              - system.workspace.service.view_all
      - name: team
        value: 'team'
        children:
          - name: view all team
            value: 'view_all'
            guest_allow: true
          - name: create
            value: 'create'
          - name: manager
            value: 'manager'
            dependents:
              - system.workspace.team.view_all
  - name: api portal
    value: 'api_portal'
    children:
      - name: api portal
        value: 'api_portal'
        children:
          - name: view
            value: 'view'
            guest_allow: true
  - name: analysis
    value: 'analysis'
    children:
      - name: run view
        value: 'run_view'
        children:
          - name: view
            value: 'view'
            guest_allow: true
  - name: system settings
    value: 'settings'
    children:
      - name: general
        value: 'general'
        children:
          - name: view
            value: 'view'
            guest_allow: true
          - name: manager
            value: 'manager'
      - name: account
        value: 'account'
        children:
          - name: view
            value: 'view'
            guest_allow: true
          - name: manager
            value: 'manager'
            apis:
              - "POST:/api/v1/user/account"
              - "PUT:/api/v1/user/account"
              - "DELETE:/api/v1/user/account"
              - "POST:/api/v1/user/account/enable"
              - "POST:/api/v1/user/account/disable"
              - "POST:/api/v1/user/department"
              - "PUT:/api/v1/user/department"
              - "DELETE:/api/v1/user/department"
              - "POST:/api/v1/user/department/member"
              - "DELETE:/api/v1/user/department/member"
              - "POST:/api/v1/user/department/member/remove"
              - "POST:/api/v1/account/role"
            dependents:
              - system.settings.account.view
      - name: role
        value: 'role'
        children:
          - name: view
            guest_allow: true
            value: 'view'
            apis:
              - "GET:/api/v1/system/roles"
              - "GET:/api/v1/system/role"
              - "GET:/api/v1/team/roles"
              - "GET:/api/v1/team/role"
      - name: api gateway
        value: 'api_gateway'
        children:
          - name: view
            cname: 查看
            value: 'view'
            guest_allow: true
            apis:
              - "GET:/api/v1/cluster/nodes"
          - name: manager
            value: 'manager'
            apis:
              - "PUT:/api/v1/cluster/reset"
              - "POST:/api/v1/cluster/check"
      - name: ai provider
        value: 'ai_provider'
        children:
          - name: view
            value: 'view'
            guest_allow: true
            apis:
              - "GET:/api/v1/ai/providers"
              - "GET:/api/v1/ai/provider/config"
          - name: manager
            value: 'manager'
            apis:
              - "PUT:/api/v1/ai/provider/config"
              - "PUT:/api/v1/ai/provider/default-llm"
            dependents:
              - system.settings.ai_provider.view
      - name: ssl certificate
        cname: 证书
        value: 'ssl_certificate'
        children:
          - name: view
            value: 'view'
            guest_allow: true
            apis:
              - "GET:/api/v1/certificates"
              - "GET:/api/v1/certificate"
          - name: manager
            value: 'manager'
            apis:
              - "POST:/api/v1/certificate"
              - "PUT:/api/v1/certificate"
              - "DELETE:/api/v1/certificate"
            dependents:
              - system.settings.ssl_certificate.view
      - name: data source
        value: 'data_source'
        children:
          - name: view
            value: 'view'
            guest_allow: true
            apis:
              - "GET:/api/v1/monitor/config"
          - name: manager
            value: 'manager'
            apis:
              - "POST:/api/v1/monitor/config"
              - "PUT:/api/v1/monitor/config"
            dependents:
              - system.settings.data_source.view
      - name: log configuration
        value: 'log_configuration'
        children:
          - name: view
            value: 'view'
            guest_allow: true
            apis:
              - "GET:/api/v1/dynamic/{name}/info"
              - "GET:/api/v1/dynamic/{name}/list"
              - "GET:/api/v1/dynamic/{name}/render"
          - name: manager
            value: 'manager'
            apis:
              - "POST:/api/v1/dynamic/{name}"
              - "PUT:/api/v1/dynamic/{name}/config"
              - "DELETE:/api/v1/dynamic/{name}/batch"
              - "PUT:/api/v1/dynamic/{name}/online"
              - "PUT:/api/v1/dynamic/{name}/offline"
            dependents:
              - system.settings.log_configuration.view
team:
  - name: service
    value: 'service'
    children:
      - name: api
        value: 'api'
        children:
          - name: view
            value: 'view'
            guest_allow: true
            apis:
              - "GET:/api/v1/service/routers"
              - "GET:/api/v1/service/router/detail"
              - "GET:/api/v1/service/router/detail/simple"
              - "GET:/api/v1/service/router/define"
          - name: manager
            value: 'manager'
            apis:
              - "POST:/api/v1/service/router"
              - "PUT:/api/v1/service/router"
              - "DELETE:/api/v1/service/router"
            dependents:
                - team.service.api.view
      - name: api doc
        cname: API文档
        value: 'api_doc'
        children:
          - name: view
            value: 'view'
            guest_allow: true
            apis:
              - "GET:/api/v1/service/api_doc"
          - name: manager
            value: 'manager'
            apis:
              - "PUT:/api/v1/service/api_doc"
              - "POST:/api/v1/service/api_doc/upload"
            dependents:
                - team.service.api_doc.view
      - name: service intro
        value: 'service_intro'
        children:
          - name: view
            value: 'view'
            guest_allow: true
          - name: manager
            value: 'manager'
            dependents:
                - team.service.service_intro.view
      - name: upstream
        cname: 上游
        value: 'upstream'
        children:
          - name: view
            value: 'view'
            guest_allow: true
            apis:
              - "GET:/api/v1/service/upstream"
          - name: manager
            value: 'manager'
            apis:
              - "PUT:/api/v1/service/upstream"
            dependents:
                - team.service.upstream.view
      - name: release
        value: 'release'
        children:
          - name: view
            value: 'view'
            guest_allow: true
            apis:
              - "GET:/api/v1/service/releases"
              - "GET:/api/v1/service/release"
              - "GET:/api/v1/service/publishs"
              - "GET:/api/v1/service/publish/check"
              - "GET:/api/v1/service/release/preview"
              - "GET:/api/v1/service/publish/status"
          - name: manager
            value: 'manager'
            apis:
              - "POST:/api/v1/service/publish/release/do"
              - "DELETE:/api/v1/service/release"
            dependents:
              - team.service.release.view
      - name: subscription review
        value: 'subscription'
        children:
          - name: view
            value: 'view'
            guest_allow: true
            apis:
              - "GET:/api/v1/service/approval/subscribes"
              - "GET:/api/v1/service/approval/subscribe"
              - "GET:/api/v1/service/subscribers"
          - name: manager
            value: 'manager'
            apis:
              - "POST:/api/v1/service/approval/subscribe"
              - "POST:/api/v1/service/subscriber"
              - "DELETE:/api/v1/service/subscriber"
            dependents:
                - team.service.subscription.view
      - name: service
        value: 'service'
        children:
          - name: manager
            value: 'manager'
            apis:
              - "PUT:/api/v1/service/info"
              - "POST:/api/v1/team/service"
              - "DELETE:/api/v1/team/service"
            dependents:
              - team.service.service.manager
  - name: consumer
    value: 'consumer'
    children:
      - name: subscription service
        cname: 订阅服务
        value: 'subscription'
        children:
          - name: allow subscribe service
            value: 'subscribe'
          - name: view subscribed services
            value: 'view_subscribed_service'
            guest_allow: true
            apis:
              - "GET:/api/v1/application/subscription"
          - name: manager subscribed services
            value: 'manager_subscribed_services'
            apis:
              - "POST:/api/v1/catalogue/service/subscribe"
              - "POST:/api/v1/application/subscription/cancel"
              - "POST:/api/v1/application/subscription/cancel_apply"
      - name: authorization
        value: 'authorization'
        children:
          - name: view
            value: 'view'
            guest_allow: true
            apis:
              - "GET:/api/v1/app/authorization"
              - "GET:/api/v1/app/authorizations"
              - "GET:/api/v1/app/authorization/details"
          - name: manager
            value: 'manager'
            apis:
              - "POST:/api/v1/app/authorization"
              - "PUT:/api/v1/app/authorization"
              - "DELETE:/api/v1/app/authorization"
      - name: consumer
        value: 'application'
        children:
          - name: manager
            value: 'manager'
            apis:
              - "PUT:/api/v1/app/info"
              - "POST:/api/v1/team/app"
  - name: team
    value: 'team'
    children:
      - name: service
        value: 'service'
        children:
          - name: view
            value: 'view'
            guest_allow: true
          - name: manager
            value: 'manager'
            dependents:
              - team.team.service.view
      - name: consumer
        value: 'consumer'
        children:
          - name: view
            value: 'view'
            guest_allow: true
          - name: manager
            value: 'manager'
            dependents:
              - team.team.consumer.view
      - name: member
        value: 'member'
        children:
          - name: view
            value: 'view'
            guest_allow: true
          - name: manager
            value: 'manager'
            dependents:
              - team.team.member.view
      - name: team settings
        value: 'team'
        children:
          - name: view
            value: 'view'
            guest_allow: true
            apis:
          - name: manager
            value: 'manager'
            apis:
            dependents:
              - team.team.team.view