APIPark/resources/access/role.yaml

system:
  - name: supper admin
    value: supper_admin
    permits:
      - system.dashboard.run_view.view
      - system.devops.ai_provider.manager
      - system.devops.ai_provider.view
      - system.devops.cluster.manager
      - system.devops.cluster.view
      - system.devops.data_source.manager
      - system.devops.data_source.view
      - system.devops.log_configuration.manager
      - system.devops.log_configuration.view
      - system.devops.ssl_certificate.manager
      - system.devops.ssl_certificate.view
      - system.organization.member.manager
      - system.organization.member.view
      - system.organization.role.view_system_role
      - system.organization.role.view_team_role
      - system.organization.team.manager
      - system.organization.team.view
      - system.settings.general.manager
      - system.settings.general.view
      - system.settings.service_classification.manager
      - system.settings.service_classification.view
      - system.workspace.api_market.view
      - system.workspace.application.view_all
      - system.workspace.service.view_all
      - system.workspace.team.view_all
    supper: true
  - name: team admin
    value: team_admin
    permits:
      - system.organization.role.view_team_role
      - system.organization.team.manager
      - system.organization.team.view
      - system.workspace.api_market.view
      - system.workspace.application.view_all
      - system.workspace.service.view_all
      - system.workspace.team.view_all
  - name: devops admin
    value: devops_admin
    permits:
      - system.dashboard.run_view.view
      - system.devops.ai_provider.manager
      - system.devops.ai_provider.view
      - system.devops.cluster.manager
      - system.devops.cluster.view
      - system.devops.data_source.manager
      - system.devops.data_source.view
      - system.devops.log_configuration.manager
      - system.devops.log_configuration.view
      - system.devops.ssl_certificate.manager
      - system.devops.ssl_certificate.view
      - system.workspace.api_market.view
      - system.workspace.application.view_all
      - system.workspace.service.view_all
      - system.workspace.team.view_all
      - system.settings.general.manager
      - system.settings.general.view
      - system.settings.service_classification.manager
      - system.settings.service_classification.view
  - name: general member
    value: member
    permits:
    - system.workspace.api_market.view
    default: true
  - name: guest
    value: guest
    permits:
      - system.settings.service_classification.view
      - system.devops.cluster.view
      - system.devops.log_configuration.view
      - system.devops.ssl_certificate.view
      - system.devops.monitor.view
      - system.organization.member.view
      - system.organization.role.view_system_role
      - system.organization.role.view_team_role
      - system.organization.team.view
      - system.workspace.api_market.view
      - system.workspace.application.view_all
      - system.workspace.service.view_all
      - system.workspace.team.view_all
      - system.dashboard.run_view.view
team:
  - name: team admin
    value: team_admin
    permits:
      - team.application.application.manager
      - team.application.authorization.manager
      - team.application.authorization.view
      - team.application.subscription.manager
      - team.application.subscription.view
      - team.service.api_doc.view
      - team.service.api_doc.manager
      - team.service.router.manager
      - team.service.router.view
      - team.service.release.manager
      - team.service.release.view
      - team.service.service.manager
      - team.service.subscription.manager
      - team.service.subscription.view
      - team.service.upstream.manager
      - team.service.upstream.view
      - team.team.member.manager
      - team.team.member.view
      - team.team.team.manager
      - team.team.team.view
    supper: true
  - name: service admin
    value: service_admin
    permits:
      - team.service.service.manager
      - team.service.upstream.manager
      - team.service.upstream.view
      - team.service.api_doc.view
      - team.service.api_doc.manager
      - team.service.router.manager
      - team.service.router.view
      - team.service.subscription.manager
      - team.service.subscription.view
      - team.service.release.manager
      - team.service.release.view
      - team.team.member.view
  - name: service developer
    value: service_developer
    permits:
      - team.service.upstream.manager
      - team.service.upstream.view
      - team.service.api_doc.view
      - team.service.api_doc.manager
      - team.service.router.manager
      - team.service.router.view
      - team.service.release.manager
      - team.service.release.view
      - team.team.member.view
  - name: application admin
    value: application_admin
    permits:
      - team.application.application.manager
      - team.application.authorization.manager
      - team.application.authorization.view
      - team.application.subscription.manager
      - team.application.subscription.view
      - team.team.member.view
  - name: application developer
    value: application_developer
    permits:
      - team.application.authorization.view
      - team.application.subscription.manager
      - team.application.subscription.view
      - team.team.member.view
    default: true
  - name: guest
    value: guest
    permits:
      - team.application.authorization.view
      - team.application.subscription.view
      - team.service.router.view
      - team.service.release.view
      - team.service.subscription.view
      - team.service.upstream.view
      - team.team.member.view
      - team.team.team.view