140 lines
3.0 KiB
C#
140 lines
3.0 KiB
C#
|
namespace OTSSignsOrchestrator.Server.Workers;
|
||
|
|
|
||
|
|
/// <summary>
|
||
|
|
/// Hardcoded Xibo feature ACL manifests per role.
|
||
|
|
/// Used by Phase2Pipeline step "assign-group-acl" when calling
|
||
|
|
/// <c>POST /api/group/{id}/acl</c>.
|
||
|
|
///
|
||
|
|
/// ObjectId is the feature key, PermissionsId is the permission level ("view", "edit", "delete").
|
||
|
|
/// </summary>
|
||
|
|
public static class XiboFeatureManifests
|
||
|
|
{
|
||
|
|
/// <summary>Viewer role: read-only access to layouts, displays, media.</summary>
|
||
|
|
public static readonly string[] ViewerObjectIds =
|
||
|
|
[
|
||
|
|
"layout.view",
|
||
|
|
"media.view",
|
||
|
|
"display.view",
|
||
|
|
"schedule.view",
|
||
|
|
"report.view",
|
||
|
|
];
|
||
|
|
|
||
|
|
public static readonly string[] ViewerPermissionIds =
|
||
|
|
[
|
||
|
|
"view",
|
||
|
|
"view",
|
||
|
|
"view",
|
||
|
|
"view",
|
||
|
|
"view",
|
||
|
|
];
|
||
|
|
|
||
|
|
/// <summary>Editor role: view + edit for layouts, media, schedules.</summary>
|
||
|
|
public static readonly string[] EditorObjectIds =
|
||
|
|
[
|
||
|
|
"layout.view",
|
||
|
|
"layout.edit",
|
||
|
|
"media.view",
|
||
|
|
"media.edit",
|
||
|
|
"display.view",
|
||
|
|
"schedule.view",
|
||
|
|
"schedule.edit",
|
||
|
|
"report.view",
|
||
|
|
];
|
||
|
|
|
||
|
|
public static readonly string[] EditorPermissionIds =
|
||
|
|
[
|
||
|
|
"view",
|
||
|
|
"edit",
|
||
|
|
"view",
|
||
|
|
"edit",
|
||
|
|
"view",
|
||
|
|
"view",
|
||
|
|
"edit",
|
||
|
|
"view",
|
||
|
|
];
|
||
|
|
|
||
|
|
/// <summary>Admin role: full access to all features.</summary>
|
||
|
|
public static readonly string[] AdminObjectIds =
|
||
|
|
[
|
||
|
|
"layout.view",
|
||
|
|
"layout.edit",
|
||
|
|
"layout.delete",
|
||
|
|
"media.view",
|
||
|
|
"media.edit",
|
||
|
|
"media.delete",
|
||
|
|
"display.view",
|
||
|
|
"display.edit",
|
||
|
|
"display.delete",
|
||
|
|
"schedule.view",
|
||
|
|
"schedule.edit",
|
||
|
|
"schedule.delete",
|
||
|
|
"report.view",
|
||
|
|
"user.view",
|
||
|
|
"user.edit",
|
||
|
|
];
|
||
|
|
|
||
|
|
public static readonly string[] AdminPermissionIds =
|
||
|
|
[
|
||
|
|
"view",
|
||
|
|
"edit",
|
||
|
|
"delete",
|
||
|
|
"view",
|
||
|
|
"edit",
|
||
|
|
"delete",
|
||
|
|
"view",
|
||
|
|
"edit",
|
||
|
|
"delete",
|
||
|
|
"view",
|
||
|
|
"edit",
|
||
|
|
"delete",
|
||
|
|
"view",
|
||
|
|
"view",
|
||
|
|
"edit",
|
||
|
|
];
|
||
|
|
|
||
|
|
/// <summary>OTS IT group: full super-admin access (all features + user management).</summary>
|
||
|
|
public static readonly string[] OtsItObjectIds =
|
||
|
|
[
|
||
|
|
"layout.view",
|
||
|
|
"layout.edit",
|
||
|
|
"layout.delete",
|
||
|
|
"media.view",
|
||
|
|
"media.edit",
|
||
|
|
"media.delete",
|
||
|
|
"display.view",
|
||
|
|
"display.edit",
|
||
|
|
"display.delete",
|
||
|
|
"schedule.view",
|
||
|
|
"schedule.edit",
|
||
|
|
"schedule.delete",
|
||
|
|
"report.view",
|
||
|
|
"user.view",
|
||
|
|
"user.edit",
|
||
|
|
"user.delete",
|
||
|
|
"application.view",
|
||
|
|
"application.edit",
|
||
|
|
];
|
||
|
|
|
||
|
|
public static readonly string[] OtsItPermissionIds =
|
||
|
|
[
|
||
|
|
"view",
|
||
|
|
"edit",
|
||
|
|
"delete",
|
||
|
|
"view",
|
||
|
|
"edit",
|
||
|
|
"delete",
|
||
|
|
"view",
|
||
|
|
"edit",
|
||
|
|
"delete",
|
||
|
|
"view",
|
||
|
|
"edit",
|
||
|
|
"delete",
|
||
|
|
"view",
|
||
|
|
"view",
|
||
|
|
"edit",
|
||
|
|
"delete",
|
||
|
|
"view",
|
||
|
|
"edit",
|
||
|
|
];
|
||
|
|
}
|