APIPark/resources/access/role.yaml

system:
  - name: supper_admin
    cname: 超级管理员
    permits:
      - system.dashboard.run_view.view
      - system.devops.ai_provider.manager
      - system.devops.ai_provider.view
      - system.devops.cluster.manager
      - system.devops.cluster.view
      - system.devops.data_source.manager
      - system.devops.data_source.view
      - system.devops.log_configuration.manager
      - system.devops.log_configuration.view
      - system.devops.ssl_certificate.manager
      - system.devops.ssl_certificate.view
      - system.organization.member.manager
      - system.organization.member.view
      - system.organization.role.view_system_role
      - system.organization.role.view_team_role
      - system.organization.team.manager
      - system.organization.team.view
      - system.settings.general.manager
      - system.settings.general.view
      - system.settings.service_classification.manager
      - system.settings.service_classification.view
      - system.workspace.api_market.view
      - system.workspace.application.view_all
      - system.workspace.service.view_all
      - system.workspace.team.view_all
    supper: true
  - name: team_admin
    cname: 团队管理员
    permits:
      - system.organization.role.view_team_role
      - system.organization.team.manager
      - system.organization.team.view
      - system.workspace.api_market.view
      - system.workspace.application.view_all
      - system.workspace.service.view_all
      - system.workspace.team.view_all
  - name: devops_admin
    cname: 运维管理员
    permits:
      - system.dashboard.run_view.view
      - system.devops.ai_provider.manager
      - system.devops.ai_provider.view
      - system.devops.cluster.manager
      - system.devops.cluster.view
      - system.devops.data_source.manager
      - system.devops.data_source.view
      - system.devops.log_configuration.manager
      - system.devops.log_configuration.view
      - system.devops.ssl_certificate.manager
      - system.devops.ssl_certificate.view
      - system.workspace.api_market.view
      - system.workspace.application.view_all
      - system.workspace.service.view_all
      - system.workspace.team.view_all
      - system.settings.general.manager
      - system.settings.general.view
      - system.settings.service_classification.manager
      - system.settings.service_classification.view
  - name: member
    cname: 普通成员
    permits:
    - system.workspace.api_market.view
    default: true
  - name: guest
    cname: 只读成员
    permits:
      - system.settings.service_classification.view
      - system.devops.cluster.view
      - system.devops.log_configuration.view
      - system.devops.ssl_certificate.view
      - system.devops.monitor.view
      - system.organization.member.view
      - system.organization.role.view_system_role
      - system.organization.role.view_team_role
      - system.organization.team.view
      - system.workspace.api_market.view
      - system.workspace.application.view_all
      - system.workspace.service.view_all
      - system.workspace.team.view_all
      - system.dashboard.run_view.view
team:
  - name: team_admin
    cname: 团队管理员
    permits:
      - team.application.application.manager
      - team.application.authorization.manager
      - team.application.authorization.view
      - team.application.subscription.manager
      - team.application.subscription.view
      - team.service.api_doc.view
      - team.service.api_doc.manager
      - team.service.router.manager
      - team.service.router.view
      - team.service.release.manager
      - team.service.release.view
      - team.service.service.manager
      - team.service.subscription.manager
      - team.service.subscription.view
      - team.service.upstream.manager
      - team.service.upstream.view
      - team.team.member.manager
      - team.team.member.view
      - team.team.team.manager
      - team.team.team.view
    supper: true
  - name: service_admin
    cname: 服务管理员
    permits:
      - team.service.service.manager
      - team.service.upstream.manager
      - team.service.upstream.view
      - team.service.api_doc.view
      - team.service.api_doc.manager
      - team.service.router.manager
      - team.service.router.view
      - team.service.subscription.manager
      - team.service.subscription.view
      - team.service.release.manager
      - team.service.release.view
      - team.team.member.view
  - name: service_developer
    cname: 服务开发者
    permits:
      - team.service.upstream.manager
      - team.service.upstream.view
      - team.service.api_doc.view
      - team.service.api_doc.manager
      - team.service.router.manager
      - team.service.router.view
      - team.service.release.manager
      - team.service.release.view
      - team.team.member.view
  - name: application_admin
    cname: 应用管理员
    permits:
      - team.application.application.manager
      - team.application.authorization.manager
      - team.application.authorization.view
      - team.application.subscription.manager
      - team.application.subscription.view
      - team.team.member.view
  - name: application_developer
    cname: 应用开发者
    permits:
      - team.application.authorization.view
      - team.application.subscription.manager
      - team.application.subscription.view
      - team.team.member.view
    default: true
  - name: guest
    cname: 只读成员
    permits:
      - team.application.authorization.view
      - team.application.subscription.view
      - team.service.router.view
      - team.service.release.view
      - team.service.subscription.view
      - team.service.upstream.view
      - team.team.member.view
      - team.team.team.view