Adding #dmaap to Subject I am also interested in this answer since apps need to define a Role which will be granted perm to pub/sub on a specific DMaaP MR topic. I am currently assuming that the topic perm creation and grant steps will be done by Buscontroller as a result of calls to its API at deployment time. But, need to understand what is done in “seed scripts” first.
-Dom From: [email protected] [mailto:[email protected]] On Behalf Of FORSYTH, JAMES Sent: Thursday, September 6, 2018 1:10 PM To: [email protected] Subject: [onap-discuss] Boostrapping AAF permissions and roles #aaf #aai ***Security Advisory: This Message Originated Outside of AT&T *** Reference http://cso.att.com/EmailSecurity/IDSP.html for more information. Hi, Jonathan or other AAF SMEs, What is your recommendation for seeding application permissions and assigning identities to roles? Should AAI provide a set of roles/permissions that can be included with the seed scripts that are being run when instantiating demo environments? We want to do something like this (taken from Pavel Paroulek’s page on the wiki, https://wiki.onap.org/x/c4JlAg<https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.onap.org_x_c4JlAg&d=DwQGaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=TTiyLt3NmHhqJbSZsYv8tdAqTAgC-wtEx8NKq2P__08&m=9myz4ZUs9UV1wyP_JizgFBTuyDeKXJSCFUldn0_9GPY&s=7cbd1UOfGiSvb_O38I3uB7Rjd_6jIAdmC5Nvp9YuRcw&e=>) role create org.onap.aai.resources_all perm create org.onap.aai.resources * get org.onap.aai.resources_all perm create org.onap.aai.resources * put org.onap.aai.resources_all perm create org.onap.aai.resources * post org.onap.aai.resources_all perm create org.onap.aai.resources * patch org.onap.aai.resources_all perm create org.onap.aai.resources * delete org.onap.aai.resources_all user role add [email protected]<mailto:[email protected]> org.onap.aai.resources_all #just an example, add role to the correct user role create org.onap.aai.resources_readonly perm create org.onap.aai.resources * get org.onap.aai.resources_readonly Thanks, jimmy -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12303): https://lists.onap.org/g/onap-discuss/message/12303 Mute This Topic: https://lists.onap.org/mt/25239450/21656 Mute #aai: https://lists.onap.org/mk?hashtag=aai&subid=2740164 Mute #aaf: https://lists.onap.org/mk?hashtag=aaf&subid=2740164 Group Owner: [email protected] Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
