On Wed, Apr 8, 2015 at 3:52 PM, Dilan Udara Ariyaratne <[email protected]>
wrote:
> Hi Folks,
>
> I have been going through the permission model used by WSO2 MDM UI 2.0.0
> Release
> and found out that we are inserting a set of self-defined permissions to a
> registry path
> starting with the following pattern.
>
> "/_system/governance/permission/" in
> registry.put("/_system/governance/permission/" + path + "/" +
> permission.key, resource);
>
> My first question would be:
> [1] Is this some kind of standard path" where we can define permissions
> as in some permission tree where a set of permissions mapped into
> some defined role?
>
This is a the location used to add new permissions (but not assigining).
What you add here will be available in the permission tree.
>
> My second question would be:
> [2] How does the mapping occur in between users -> Roles -> Permissions?
> I have seen some kind of mapping in between permissions and roles for
> the following two user types
> (A) device-mgt/admin and (B) device-mgt/user
> in insertAppPermissions() function inside modules/utility.js file.
> Is this some kind of temporary touch-up for the permission model or
> are we planning to have only these two user roles in the system?
>
Their is no role mapping in the permission tree. 'admin' and 'user' are
used to categorize certain permissions. In device management context, it
means controller other's devices vs controlling my devices. But still - we
have to assign the permissions to the role. If a role has a device-mgt/admin
permission, it can do operations/actions on others devices.
> Appreciate your feedback on this.
>
> Thanks.
>
> *Dilan U. Ariyaratne*
> Software Engineer
> WSO2 Inc. <http://wso2.com/>
> Mobile: +94775149066
> lean . enterprise . middleware
>
--
Dulitha Wijewantha (Chan)
Software Engineer - Mobile Development
WSO2 Inc
Lean.Enterprise.Middleware
* ~Email [email protected] <[email protected]>*
* ~Mobile +94712112165*
* ~Website dulitha.me <http://dulitha.me>*
* ~Twitter @dulitharw <https://twitter.com/dulitharw>*
*~Github @dulichan <https://github.com/dulichan>*
*~SO @chan <http://stackoverflow.com/users/813471/chan>*
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev
