From 94f3092ef9156aab8123e798cdef1c9e7643fa0c Mon Sep 17 00:00:00 2001 From: Sanjay Dalal Date: Mon, 14 Jun 2010 18:21:21 +0000 Subject: [PATCH] CSPACE-1300 CSPACE-1930 The delete on permrole sub resource of authorization/permissions and authorization/roles services now requires a POST with parameter _method=delete (/authorization/roles/{rolecsid}/permroles?_method=delete) and entity body (like POST for create). The delete only deletes the relationships found in the entity body. test: all service tests, permissionrole, rolepermission, authorization and multi tenancy tests M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionResource.java M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleDocumentHandler.java M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/RoleResource.java M services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionRoleSubResource.java M services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml M services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml M services/authorization-mgt/import/src/main/resources/import-data/import-roles.xml M services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionRoleServiceTest.java M services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/RolePermissionServiceTest.java M services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleClient.java M services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionClient.java M services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleProxy.java M services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionProxy.java M services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaRelationshipStorageClient.java M services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java M services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthorizationServiceTest.java M services/security/client/src/test/java/org/collectionspace/services/security/client/test/MultiTenancyTest.java --- .../services/client/PermissionRoleClient.java | 15 +- .../services/client/PermissionRoleProxy.java | 11 +- .../services/client/RolePermissionClient.java | 22 +- .../services/client/RolePermissionProxy.java | 11 +- .../test/PermissionRoleServiceTest.java | 24 +- .../test/RolePermissionServiceTest.java | 31 +- .../import-data/import-permissions-roles.xml | 2128 +++++++++++------ .../import-data/import-permissions.xml | 1448 +++++++---- .../resources/import-data/import-roles.xml | 16 +- .../authorization/PermissionResource.java | 15 +- .../PermissionRoleSubResource.java | 20 + .../services/authorization/RoleResource.java | 16 +- .../storage/AuthorizationDelegate.java | 51 +- .../PermissionRoleDocumentHandler.java | 8 +- .../common/security/SecurityInterceptor.java | 4 - .../jpa/JpaRelationshipStorageClient.java | 61 + .../client/test/AuthorizationServiceTest.java | 35 +- .../client/test/MultiTenancyTest.java | 17 +- 18 files changed, 2699 insertions(+), 1234 deletions(-) diff --git a/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleClient.java b/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleClient.java index f323ad90e..b6e297146 100644 --- a/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleClient.java +++ b/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleClient.java @@ -68,8 +68,8 @@ public class PermissionRoleClient extends AbstractServiceClientImpl { */ @Override public CollectionSpaceProxy getProxy() { - return this.permissionRoleProxy; - } + return this.permissionRoleProxy; + } /** * allow to reset proxy as per security needs. @@ -84,7 +84,6 @@ public class PermissionRoleClient extends AbstractServiceClientImpl { } } - /** * Read. * @@ -109,16 +108,16 @@ public class PermissionRoleClient extends AbstractServiceClientImpl { return permissionRoleProxy.create(csid, permRole); } + /** - * Delete. + * Delete given relationships between given permission and role(s) * * @param csid the csid - * @param prcsid relationship does not have an id, junk is fine + * @param relationships to delete * @return response * @see */ - public ClientResponse delete(String csid, String prcsid) { - return permissionRoleProxy.delete(csid, prcsid); + public ClientResponse delete(String csid, PermissionRole permRole) { + return permissionRoleProxy.delete(csid, "delete", permRole); } - } diff --git a/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleProxy.java b/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleProxy.java index 45d389c9b..e3f2b9ad0 100644 --- a/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleProxy.java +++ b/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/PermissionRoleProxy.java @@ -27,12 +27,12 @@ package org.collectionspace.services.client; import javax.ws.rs.Consumes; -import javax.ws.rs.DELETE; import javax.ws.rs.GET; import javax.ws.rs.POST; import javax.ws.rs.Path; import javax.ws.rs.PathParam; import javax.ws.rs.Produces; +import javax.ws.rs.QueryParam; import javax.ws.rs.core.Response; @@ -58,9 +58,10 @@ public interface PermissionRoleProxy extends CollectionSpaceProxy { ClientResponse read(@PathParam("csid") String csid, @PathParam("prcsid") String prcsid); - //(D)elete - @DELETE - @Path("/{csid}/permroles/{prcsid}") + + @POST + @Path("/{csid}/permroles") ClientResponse delete(@PathParam("csid") String csid, - @PathParam("prcsid") String prcsid); + @QueryParam("_method") String method, + PermissionRole permRole); } diff --git a/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionClient.java b/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionClient.java index 8ab11d10a..4077ce8a7 100644 --- a/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionClient.java +++ b/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionClient.java @@ -68,8 +68,8 @@ public class RolePermissionClient extends AbstractServiceClientImpl { */ @Override public CollectionSpaceProxy getProxy() { - return this.rolePermissionProxy; - } + return this.rolePermissionProxy; + } /** * allow to reset proxy as per security needs. @@ -84,7 +84,6 @@ public class RolePermissionClient extends AbstractServiceClientImpl { } } - /** * Read. * @@ -98,7 +97,7 @@ public class RolePermissionClient extends AbstractServiceClientImpl { } /** - * Creates the. + * Creates the relationships. * * @param csid the csid * @param permRole the perm role @@ -110,15 +109,12 @@ public class RolePermissionClient extends AbstractServiceClientImpl { } /** - * Delete. - * - * @param csid the csid - * @param prcsid relationship does not have an id, junk is fine - * @return response - * @see + * delete given relationships between given role and permission(s) + * @param csid + * @param permRole + * @return */ - public ClientResponse delete(String csid, String prcsid) { - return rolePermissionProxy.delete(csid, prcsid); + public ClientResponse delete(String csid, PermissionRole permRole) { + return rolePermissionProxy.delete(csid, "delete", permRole); } - } diff --git a/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionProxy.java b/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionProxy.java index 6dc9ac43b..3613ba4c2 100644 --- a/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionProxy.java +++ b/services/authorization-mgt/client/src/main/java/org/collectionspace/services/client/RolePermissionProxy.java @@ -33,6 +33,7 @@ import javax.ws.rs.POST; import javax.ws.rs.Path; import javax.ws.rs.PathParam; import javax.ws.rs.Produces; +import javax.ws.rs.QueryParam; import javax.ws.rs.core.Response; @@ -58,9 +59,9 @@ public interface RolePermissionProxy extends CollectionSpaceProxy { ClientResponse read(@PathParam("csid") String csid, @PathParam("prcsid") String prcsid); - //(D)elete - @DELETE - @Path("/{csid}/permroles/{prcsid}") - ClientResponse delete(@PathParam("csid") String csid, - @PathParam("prcsid") String prcsid); + + @POST + @Path("/{csid}/permroles") + ClientResponse delete(@PathParam("csid") String csid, + @QueryParam("_method") String method, PermissionRole permRole); } diff --git a/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionRoleServiceTest.java b/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionRoleServiceTest.java index 41fc32752..82be06e7d 100644 --- a/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionRoleServiceTest.java +++ b/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/PermissionRoleServiceTest.java @@ -459,8 +459,10 @@ public class PermissionRoleServiceTest extends AbstractServiceTestImpl { PermissionRoleClient client = new PermissionRoleClient(); ClientResponse res = null; try { - res = client.delete( - permValues.get(TEST_SERVICE_NAME + TEST_MARKER).getPermissionId(), "123"); + PermissionValue pv = permValues.get(TEST_SERVICE_NAME + TEST_MARKER); + PermissionRole permRole = createPermissionRoleInstance(pv, + roleValues.values(), true, true); + res = client.delete(pv.getPermissionId(), permRole); int statusCode = res.getStatus(); // Check the status code of the response: does it match @@ -564,24 +566,6 @@ public class PermissionRoleServiceTest extends AbstractServiceTestImpl { logger.debug("Cleaning up temporary resources created for testing ..."); } - PermissionRoleClient client = new PermissionRoleClient(); - for (String resourceId : allResourceIdsCreated) { - - ClientResponse res = client.delete(resourceId, "123"); - int statusCode = res.getStatus(); - try { - if (logger.isDebugEnabled()) { - logger.debug("cleanup: delete relationships for permission id=" - + resourceId + " status=" + statusCode); - } - Assert.assertTrue(REQUEST_TYPE.isValidStatusCode(statusCode), - invalidStatusCodeMessage(REQUEST_TYPE, statusCode)); - Assert.assertEquals(statusCode, EXPECTED_STATUS_CODE); - } finally { - res.releaseConnection(); - } - } - for (PermissionValue pv : permValues.values()) { deletePermission(pv.getPermissionId()); } diff --git a/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/RolePermissionServiceTest.java b/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/RolePermissionServiceTest.java index bb33ec820..2df850362 100644 --- a/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/RolePermissionServiceTest.java +++ b/services/authorization-mgt/client/src/test/java/org/collectionspace/services/authorization/client/test/RolePermissionServiceTest.java @@ -187,9 +187,7 @@ public class RolePermissionServiceTest extends AbstractServiceTestImpl { ClientResponse res = null; try { res = client.create(rv.getRoleId(), permRole); - int statusCode = res.getStatus(); - if (logger.isDebugEnabled()) { logger.debug(testName + ": status = " + statusCode); } @@ -358,7 +356,7 @@ public class RolePermissionServiceTest extends AbstractServiceTestImpl { PermissionRole output = (PermissionRole) res.getEntity(); String sOutput = objectAsXmlString(output, PermissionRole.class); - if(logger.isDebugEnabled()) { + if (logger.isDebugEnabled()) { logger.debug(testName + " received " + sOutput); } } finally { @@ -458,8 +456,11 @@ public class RolePermissionServiceTest extends AbstractServiceTestImpl { RolePermissionClient client = new RolePermissionClient(); ClientResponse res = null; try { + RoleValue rv = roleValues.get(getRoleName()); + PermissionRole permRole = createPermissionRoleInstance(rv, + permValues.values(), true, true); res = client.delete( - roleValues.get(getRoleName()).getRoleId(), "123"); + roleValues.get(getRoleName()).getRoleId(), permRole); int statusCode = res.getStatus(); // Check the status code of the response: does it match @@ -538,7 +539,8 @@ public class RolePermissionServiceTest extends AbstractServiceTestImpl { PermissionRole permRole = PermissionRoleFactory.createPermissionRoleInstance( rv, pvls, usePermId, useRoleId); if (logger.isDebugEnabled()) { - logger.debug("to be created, permRole"); + logger.debug("" + + "permRole"); logger.debug(objectAsXmlString(permRole, PermissionRole.class)); } return permRole; @@ -561,25 +563,6 @@ public class RolePermissionServiceTest extends AbstractServiceTestImpl { if (logger.isDebugEnabled()) { logger.debug("Cleaning up temporary resources created for testing ..."); } - - RolePermissionClient client = new RolePermissionClient(); - for (String resourceId : allResourceIdsCreated) { - - ClientResponse res = client.delete(resourceId, "123"); - int statusCode = res.getStatus(); - try { - if (logger.isDebugEnabled()) { - logger.debug("cleanup: delete relationships for permission id=" - + resourceId + " status=" + statusCode); - } - Assert.assertTrue(REQUEST_TYPE.isValidStatusCode(statusCode), - invalidStatusCodeMessage(REQUEST_TYPE, statusCode)); - Assert.assertEquals(statusCode, EXPECTED_STATUS_CODE); - } finally { - res.releaseConnection(); - } - } - for (PermissionValue pv : permValues.values()) { deletePermission(pv.getPermissionId()); } diff --git a/services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml b/services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml index 197e83452..931f7208c 100644 --- a/services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml +++ b/services/authorization-mgt/import/src/main/resources/import-data/import-permissions-roles.xml @@ -3,22 +3,22 @@ ROLE - d33b48cf-e819-4e60-ab2e-ba3f3d051f07 + 7a3779f9-6fd0-4c90-865e-9855fc503340 idgenerators - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - d33b48cf-e819-4e60-ab2e-ba3f3d051f07 + 7a3779f9-6fd0-4c90-865e-9855fc503340 idgenerators @@ -29,22 +29,22 @@ ROLE - 4b433f0a-32cb-4baf-9fcf-dc85e73eb282 + 2a32873d-7e34-44a3-874c-6ae59b97210b id - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 4b433f0a-32cb-4baf-9fcf-dc85e73eb282 + 2a32873d-7e34-44a3-874c-6ae59b97210b id @@ -55,24 +55,24 @@ ROLE - e6b24556-774d-4ab5-936d-f20c81686055 + 8c7caa28-4ccc-44aa-b925-49406f1ab8db /idgenerators/*/ids - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - e6b24556-774d-4ab5-936d-f20c81686055 + 8c7caa28-4ccc-44aa-b925-49406f1ab8db /idgenerators/*/ids @@ -85,22 +85,22 @@ ROLE - c1d5f82c-fbc2-452e-a816-a8a4af1ff187 + 45e6183c-dbd4-4922-a434-607fb5033e5a collectionobjects - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - c1d5f82c-fbc2-452e-a816-a8a4af1ff187 + 45e6183c-dbd4-4922-a434-607fb5033e5a collectionobjects @@ -111,24 +111,24 @@ ROLE - de3b57c2-7a69-4f3e-aeb5-c99b6ab96215 + 22d1bf2c-28b8-4cad-81b2-d579d205ae83 /collectionobjects/*/authorityrefs/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - de3b57c2-7a69-4f3e-aeb5-c99b6ab96215 + 22d1bf2c-28b8-4cad-81b2-d579d205ae83 /collectionobjects/*/authorityrefs/ @@ -141,22 +141,22 @@ ROLE - 29b4c628-f114-40fe-863e-763e6beb00db + 993254e1-52cc-45b2-839a-3280c41ebb75 intakes - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 29b4c628-f114-40fe-863e-763e6beb00db + 993254e1-52cc-45b2-839a-3280c41ebb75 intakes @@ -167,24 +167,24 @@ ROLE - bd86eeeb-9ed8-48f6-a5c9-ab82d4689548 + c246574f-7e7d-4a3d-90a3-488a1f13440c /intakes/*/authorityrefs/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - bd86eeeb-9ed8-48f6-a5c9-ab82d4689548 + c246574f-7e7d-4a3d-90a3-488a1f13440c /intakes/*/authorityrefs/ @@ -197,22 +197,22 @@ ROLE - a11a3a8e-311e-43e0-b91f-1bb315614469 + 12793f24-a04e-4b73-98f1-975d0877b481 loansin - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - a11a3a8e-311e-43e0-b91f-1bb315614469 + 12793f24-a04e-4b73-98f1-975d0877b481 loansin @@ -223,24 +223,24 @@ ROLE - 9b89bd44-4611-400e-b6e4-b66437d1fd4c + ec067cf5-ef69-4118-9557-1080659ebab8 /loansin/*/authorityrefs/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 9b89bd44-4611-400e-b6e4-b66437d1fd4c + ec067cf5-ef69-4118-9557-1080659ebab8 /loansin/*/authorityrefs/ @@ -253,22 +253,22 @@ ROLE - 9b182e51-fd72-4daf-af69-c8047be84b8b + 0b84bbc3-8ca2-4566-8f16-2a827e68934c loansout - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 9b182e51-fd72-4daf-af69-c8047be84b8b + 0b84bbc3-8ca2-4566-8f16-2a827e68934c loansout @@ -279,24 +279,24 @@ ROLE - ac8a3d77-709b-4120-8e2c-26d375ccb673 + be0632f2-4185-4447-b525-fdbfcf8a74cf /loansout/*/authorityrefs/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - ac8a3d77-709b-4120-8e2c-26d375ccb673 + be0632f2-4185-4447-b525-fdbfcf8a74cf /loansout/*/authorityrefs/ @@ -309,22 +309,22 @@ ROLE - f6797f43-74c1-4dd5-957b-96b264509e0a + 4489fe0b-3859-40b2-a1c2-77d6527aed53 movements - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - f6797f43-74c1-4dd5-957b-96b264509e0a + 4489fe0b-3859-40b2-a1c2-77d6527aed53 movements @@ -335,24 +335,24 @@ ROLE - f016c28a-afc1-4fda-bd18-8ca532f94b9c + 23eb0343-3a0c-4047-988e-74e626a8b11a /movements/*/authorityrefs/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - f016c28a-afc1-4fda-bd18-8ca532f94b9c + 23eb0343-3a0c-4047-988e-74e626a8b11a /movements/*/authorityrefs/ @@ -365,22 +365,22 @@ ROLE - d21d72d8-a9f9-40dd-a14d-7463bef3e457 + b4355e36-3fec-4759-b88e-96595a1182e2 vocabularies - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - d21d72d8-a9f9-40dd-a14d-7463bef3e457 + b4355e36-3fec-4759-b88e-96595a1182e2 vocabularies @@ -391,22 +391,22 @@ ROLE - db3a13e8-d795-463d-a2f7-0bc1fb7e6782 + a30f6399-95a6-4c68-8ecd-6a46d2b3c397 vocabularyitems - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - db3a13e8-d795-463d-a2f7-0bc1fb7e6782 + a30f6399-95a6-4c68-8ecd-6a46d2b3c397 vocabularyitems @@ -417,24 +417,24 @@ ROLE - 1f3ade41-7799-44db-86e5-0a8cb1122a69 + 30425726-f621-47d4-a7aa-6f2f51c15ec0 /vocabularies/*/items/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 1f3ade41-7799-44db-86e5-0a8cb1122a69 + 30425726-f621-47d4-a7aa-6f2f51c15ec0 /vocabularies/*/items/ @@ -447,22 +447,22 @@ ROLE - 302bccc4-dcf0-4790-b1ea-928eb8eeb422 + 71946447-2f14-423d-8d97-c5b5a504a43d orgauthorities - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 302bccc4-dcf0-4790-b1ea-928eb8eeb422 + 71946447-2f14-423d-8d97-c5b5a504a43d orgauthorities @@ -473,24 +473,24 @@ ROLE - 78af26c0-d2d0-48d7-aad2-2b39a07de22e + 8a576a05-4df4-40ce-8e6e-e361d115346b /orgauthorities/*/items/*/authorityrefs/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 78af26c0-d2d0-48d7-aad2-2b39a07de22e + 8a576a05-4df4-40ce-8e6e-e361d115346b /orgauthorities/*/items/*/authorityrefs/ @@ -503,22 +503,22 @@ ROLE - 16b37ab0-06f4-4c61-822d-58dc11175a29 + 3f19ad0d-7a32-4179-9eb4-a92e9b9950ab organizations - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 16b37ab0-06f4-4c61-822d-58dc11175a29 + 3f19ad0d-7a32-4179-9eb4-a92e9b9950ab organizations @@ -529,24 +529,24 @@ ROLE - ecda26f6-0561-48cd-976b-c429248162c2 + 2a82f7d6-4051-4d4f-a460-5f50f94088d6 /orgauthorities/*/items/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - ecda26f6-0561-48cd-976b-c429248162c2 + 2a82f7d6-4051-4d4f-a460-5f50f94088d6 /orgauthorities/*/items/ @@ -559,24 +559,24 @@ ROLE - 7134a8c0-4e8a-49f0-9fcd-25f0f4d2aadd + 5963d650-0c56-48ef-b2c0-6aaafad4d29c /orgauthorities/*/items/*/refobjs - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 7134a8c0-4e8a-49f0-9fcd-25f0f4d2aadd + 5963d650-0c56-48ef-b2c0-6aaafad4d29c /orgauthorities/*/items/*/refobjs @@ -589,22 +589,22 @@ ROLE - 59563bb2-747a-4be1-b725-b19164786088 + 7923a8eb-086f-4884-9677-4b92b1ebeb49 personauthorities - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 59563bb2-747a-4be1-b725-b19164786088 + 7923a8eb-086f-4884-9677-4b92b1ebeb49 personauthorities @@ -615,24 +615,24 @@ ROLE - 859b02e3-2496-4bef-86b9-eded6efc26c3 + ad893bde-69bf-433b-b69c-1d2f7310f8d5 /personauthorities/*/items/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 859b02e3-2496-4bef-86b9-eded6efc26c3 + ad893bde-69bf-433b-b69c-1d2f7310f8d5 /personauthorities/*/items/ @@ -645,24 +645,24 @@ ROLE - c1925e22-a9b1-49ba-a2f3-9bec0f49dc73 + 4c2fa893-2dbb-47a4-954f-f29d9660360c /personauthorities/*/items/*/refobjs - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - c1925e22-a9b1-49ba-a2f3-9bec0f49dc73 + 4c2fa893-2dbb-47a4-954f-f29d9660360c /personauthorities/*/items/*/refobjs @@ -675,22 +675,22 @@ ROLE - 14d1ec5d-7aec-4434-a87b-3c241d57c990 + 4dff584a-44c7-4779-afe0-09c4f1b6419e persons - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 14d1ec5d-7aec-4434-a87b-3c241d57c990 + 4dff584a-44c7-4779-afe0-09c4f1b6419e persons @@ -701,24 +701,24 @@ ROLE - e996ffda-ab9b-4496-ae5e-fbf4fc0c2095 + bdf71a87-fbbd-4679-ba43-753a760547da /personauthorities/*/items/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - e996ffda-ab9b-4496-ae5e-fbf4fc0c2095 + bdf71a87-fbbd-4679-ba43-753a760547da /personauthorities/*/items/ @@ -731,22 +731,22 @@ ROLE - 98aabdae-d3a5-498e-9b88-2a10e08bbff2 + efa8ce59-07ff-4f5b-a840-f06d7c731599 locationauthorities - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 98aabdae-d3a5-498e-9b88-2a10e08bbff2 + efa8ce59-07ff-4f5b-a840-f06d7c731599 locationauthorities @@ -757,24 +757,24 @@ ROLE - c2cc174c-77ae-4465-8020-4345b95ca22b + be3e4867-73db-4967-a1b0-61bcc268cc74 /locationauthorities/*/items/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - c2cc174c-77ae-4465-8020-4345b95ca22b + be3e4867-73db-4967-a1b0-61bcc268cc74 /locationauthorities/*/items/ @@ -787,22 +787,22 @@ ROLE - bc95ef29-37ea-445e-8333-d23e425dabc0 + f7b0955f-ff85-4153-98ef-bcb2d6557895 locations - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - bc95ef29-37ea-445e-8333-d23e425dabc0 + f7b0955f-ff85-4153-98ef-bcb2d6557895 locations @@ -813,22 +813,22 @@ ROLE - 5aa40337-279e-4174-9b6b-04fc902f3759 + 680db6da-ece6-41b7-949e-242e8753b44a acquisitions - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 5aa40337-279e-4174-9b6b-04fc902f3759 + 680db6da-ece6-41b7-949e-242e8753b44a acquisitions @@ -839,24 +839,24 @@ ROLE - 9157f4b1-acad-455d-a9eb-60bb8cb63bc2 + 8b322e33-b1f8-4162-abc2-48c6648296e8 /acquisitions/*/authorityrefs/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 9157f4b1-acad-455d-a9eb-60bb8cb63bc2 + 8b322e33-b1f8-4162-abc2-48c6648296e8 /acquisitions/*/authorityrefs/ @@ -869,22 +869,22 @@ ROLE - bbe0d2e4-dde6-484a-a413-c6c20f89ff7e + bcca627d-8ed5-49fe-ac10-86226e8d314c relations - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - bbe0d2e4-dde6-484a-a413-c6c20f89ff7e + bcca627d-8ed5-49fe-ac10-86226e8d314c relations @@ -895,26 +895,26 @@ ROLE - 3e8bdbf8-2179-460a-93b9-9fc568b811b9 + c016b267-869a-4249-b875-6266cc6beed0 - relations/subject/*/type/*/object/* + /relations/object/* - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 3e8bdbf8-2179-460a-93b9-9fc568b811b9 + c016b267-869a-4249-b875-6266cc6beed0 - relations/subject/*/type/*/object/* + /relations/object/* @@ -925,22 +925,262 @@ ROLE - a3846604-8781-4ce8-a8ee-8dd5b6a8875f + b06dcf8a-3c73-4ec6-aac0-630b66452ddd + + /relations/object/*/type/* + + + + 45c752ca-75aa-4801-a65e-5b85119e4dde + ROLE_TENANT_ADMINISTRATOR + + + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 + ROLE_TENANT_ADMINISTRATOR + + + + ROLE + + b06dcf8a-3c73-4ec6-aac0-630b66452ddd + + /relations/object/*/type/* + + + + 0 + ROLE_ADMINISTRATOR + + + + ROLE + + c6485a0d-a9c8-4bb2-a508-45e2f08e019c + + /relations/subject/* + + + + 45c752ca-75aa-4801-a65e-5b85119e4dde + ROLE_TENANT_ADMINISTRATOR + + + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 + ROLE_TENANT_ADMINISTRATOR + + + + ROLE + + c6485a0d-a9c8-4bb2-a508-45e2f08e019c + + /relations/subject/* + + + + 0 + ROLE_ADMINISTRATOR + + + + ROLE + + d4da49a7-fdaf-4dcb-a609-be1365adf3eb + + /relations/subject/*/type/* + + + + 45c752ca-75aa-4801-a65e-5b85119e4dde + ROLE_TENANT_ADMINISTRATOR + + + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 + ROLE_TENANT_ADMINISTRATOR + + + + ROLE + + d4da49a7-fdaf-4dcb-a609-be1365adf3eb + + /relations/subject/*/type/* + + + + 0 + ROLE_ADMINISTRATOR + + + + ROLE + + dab555c4-f87e-4a55-b6ef-303a1e4e3d52 + + /relations/subject/*/type/*/object/* + + + + 45c752ca-75aa-4801-a65e-5b85119e4dde + ROLE_TENANT_ADMINISTRATOR + + + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 + ROLE_TENANT_ADMINISTRATOR + + + + ROLE + + dab555c4-f87e-4a55-b6ef-303a1e4e3d52 + + /relations/subject/*/type/*/object/* + + + + 0 + ROLE_ADMINISTRATOR + + + + ROLE + + 6b901d1f-d48e-4abd-aa34-ad86071e16b5 + + /relations/type/* + + + + 45c752ca-75aa-4801-a65e-5b85119e4dde + ROLE_TENANT_ADMINISTRATOR + + + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 + ROLE_TENANT_ADMINISTRATOR + + + + ROLE + + 6b901d1f-d48e-4abd-aa34-ad86071e16b5 + + /relations/type/* + + + + 0 + ROLE_ADMINISTRATOR + + + + ROLE + + 14598bc1-98a3-4be1-ac1d-2b0627de1d73 + + /relations/type/*/object/* + + + + 45c752ca-75aa-4801-a65e-5b85119e4dde + ROLE_TENANT_ADMINISTRATOR + + + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 + ROLE_TENANT_ADMINISTRATOR + + + + ROLE + + 14598bc1-98a3-4be1-ac1d-2b0627de1d73 + + /relations/type/*/object/* + + + + 0 + ROLE_ADMINISTRATOR + + + + ROLE + + 794d6241-dfe3-4878-9ee8-c01e762e0b97 + + /relations/type/*/subject/* + + + + 45c752ca-75aa-4801-a65e-5b85119e4dde + ROLE_TENANT_ADMINISTRATOR + + + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 + ROLE_TENANT_ADMINISTRATOR + + + + ROLE + + 794d6241-dfe3-4878-9ee8-c01e762e0b97 + + /relations/type/*/subject/* + + + + 0 + ROLE_ADMINISTRATOR + + + + ROLE + + d5d555d7-2bef-4440-a568-70906599c3e5 + + /relations/type/*/subject/*/object/* + + + + 45c752ca-75aa-4801-a65e-5b85119e4dde + ROLE_TENANT_ADMINISTRATOR + + + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 + ROLE_TENANT_ADMINISTRATOR + + + + ROLE + + d5d555d7-2bef-4440-a568-70906599c3e5 + + /relations/type/*/subject/*/object/* + + + + 0 + ROLE_ADMINISTRATOR + + + + ROLE + + 738be548-ab9f-47f3-b833-cc88a7fadadc accounts - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - a3846604-8781-4ce8-a8ee-8dd5b6a8875f + 738be548-ab9f-47f3-b833-cc88a7fadadc accounts @@ -951,22 +1191,22 @@ ROLE - c14386ba-d17c-4dd3-a154-8ce06efeb88b + d0dde634-6382-494a-ab58-e48a2400c3c4 dimensions - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - c14386ba-d17c-4dd3-a154-8ce06efeb88b + d0dde634-6382-494a-ab58-e48a2400c3c4 dimensions @@ -977,22 +1217,22 @@ ROLE - 6c76319d-ae10-438c-81a8-2d414467f4f2 + d0ffd0b6-4bb6-4862-8186-ea3346d83e4d contacts - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 6c76319d-ae10-438c-81a8-2d414467f4f2 + d0ffd0b6-4bb6-4862-8186-ea3346d83e4d contacts @@ -1003,24 +1243,24 @@ ROLE - ba018b2f-b239-4710-8279-f306a9a4e387 + e97f32c5-1327-481b-b45a-205ec7a848c0 /personauthorities/*/items/*/contacts - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - ba018b2f-b239-4710-8279-f306a9a4e387 + e97f32c5-1327-481b-b45a-205ec7a848c0 /personauthorities/*/items/*/contacts @@ -1033,24 +1273,24 @@ ROLE - 53165bff-c95e-4a97-a39a-1ad340e168d2 + 0697c73b-44ca-4849-bbec-18718c1c52aa /orgauthorities/*/items/*/contacts - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 53165bff-c95e-4a97-a39a-1ad340e168d2 + 0697c73b-44ca-4849-bbec-18718c1c52aa /orgauthorities/*/items/*/contacts @@ -1063,22 +1303,22 @@ ROLE - 28e80b62-7df5-4711-8040-da8a97b76821 + 855eee73-dcfb-42ea-8a80-a8d5fd2b0fbf notes - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 28e80b62-7df5-4711-8040-da8a97b76821 + 855eee73-dcfb-42ea-8a80-a8d5fd2b0fbf notes @@ -1089,22 +1329,22 @@ ROLE - 4d216907-5bb9-41d3-9a56-9d3313e12b23 + 9bc08b08-0f23-4efd-b44a-d88e85c8cce6 authorization/roles - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 4d216907-5bb9-41d3-9a56-9d3313e12b23 + 9bc08b08-0f23-4efd-b44a-d88e85c8cce6 authorization/roles @@ -1115,22 +1355,22 @@ ROLE - fb0bbb98-d3f8-4153-8465-77e4e17414c7 + 07bcadf0-285a-4522-8263-e0a3bd77dff2 authorization/permissions - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - fb0bbb98-d3f8-4153-8465-77e4e17414c7 + 07bcadf0-285a-4522-8263-e0a3bd77dff2 authorization/permissions @@ -1141,22 +1381,22 @@ ROLE - edcfafc7-908a-47de-93a5-907b83dbbdd2 + 86941ad6-f97f-4e9c-9f10-fd64ceba33a4 authorization/permissions/permroles - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - edcfafc7-908a-47de-93a5-907b83dbbdd2 + 86941ad6-f97f-4e9c-9f10-fd64ceba33a4 authorization/permissions/permroles @@ -1167,24 +1407,24 @@ ROLE - 4b6ac5dd-46e1-4ae6-b9b5-0bcd6abbcb96 + 70f483c1-0d61-4da6-99ac-1306db3ba198 /authorization/permissions/*/permroles/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 4b6ac5dd-46e1-4ae6-b9b5-0bcd6abbcb96 + 70f483c1-0d61-4da6-99ac-1306db3ba198 /authorization/permissions/*/permroles/ @@ -1197,22 +1437,22 @@ ROLE - a9de2ce1-dfba-43d9-8c4d-9edf55f16935 + 37d853f2-41c6-44b3-b3bc-519c20627a3f accounts/accountroles - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - a9de2ce1-dfba-43d9-8c4d-9edf55f16935 + 37d853f2-41c6-44b3-b3bc-519c20627a3f accounts/accountroles @@ -1223,24 +1463,24 @@ ROLE - bab39bc6-4a06-4e20-b49d-cb20599cc8e0 + 9b1f24dc-60b1-4d30-8a78-58a216ebbac3 /accounts/*/accountroles/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - bab39bc6-4a06-4e20-b49d-cb20599cc8e0 + 9b1f24dc-60b1-4d30-8a78-58a216ebbac3 /accounts/*/accountroles/ @@ -1253,22 +1493,22 @@ ROLE - bb6074b5-7c0f-410a-a077-07e5102bd86f + 084caa48-ffc6-45d7-aab3-ddeafacf322d authorization/roles/permroles - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - bb6074b5-7c0f-410a-a077-07e5102bd86f + 084caa48-ffc6-45d7-aab3-ddeafacf322d authorization/roles/permroles @@ -1279,24 +1519,24 @@ ROLE - fd71fc5b-76ae-4d2c-a011-d6ebd350799c + 997129b8-e0dd-4319-8192-fe1dd81011c3 /authorization/roles/*/permroles/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - fd71fc5b-76ae-4d2c-a011-d6ebd350799c + 997129b8-e0dd-4319-8192-fe1dd81011c3 /authorization/roles/*/permroles/ @@ -1309,22 +1549,22 @@ ROLE - d785edac-30d7-4b1f-b120-d25c5cfa7459 + 64b5cfcc-fcae-4739-a0c4-59285d78bc76 idgenerators - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - d785edac-30d7-4b1f-b120-d25c5cfa7459 + 64b5cfcc-fcae-4739-a0c4-59285d78bc76 idgenerators @@ -1335,22 +1575,22 @@ ROLE - 0b4da442-b30c-4445-9bb4-0838d6153db5 + 9d18e1bf-0aaa-4207-9128-809167ba84ad id - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 0b4da442-b30c-4445-9bb4-0838d6153db5 + 9d18e1bf-0aaa-4207-9128-809167ba84ad id @@ -1361,24 +1601,24 @@ ROLE - 7ea90ded-ebca-4046-98fb-fdef5041f385 + 7b60568b-0466-44fc-bfd6-8d68efee44a0 /idgenerators/*/ids - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 7ea90ded-ebca-4046-98fb-fdef5041f385 + 7b60568b-0466-44fc-bfd6-8d68efee44a0 /idgenerators/*/ids @@ -1391,22 +1631,22 @@ ROLE - a2e2bacb-4d4e-4f82-91c7-e57447bd9799 + 5055f9c0-0277-47e6-9874-8fa3565a95c4 collectionobjects - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - a2e2bacb-4d4e-4f82-91c7-e57447bd9799 + 5055f9c0-0277-47e6-9874-8fa3565a95c4 collectionobjects @@ -1417,24 +1657,24 @@ ROLE - 1c37144c-94c2-427f-bc42-e85e402ed548 + b1e05df7-328d-4afe-92ff-d44a4bf50ab7 /collectionobjects/*/authorityrefs/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 1c37144c-94c2-427f-bc42-e85e402ed548 + b1e05df7-328d-4afe-92ff-d44a4bf50ab7 /collectionobjects/*/authorityrefs/ @@ -1447,22 +1687,22 @@ ROLE - e337aac3-f491-4e12-bf8a-191e710bcf39 + cf220409-e37f-4972-adff-79ee4fca7791 intakes - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - e337aac3-f491-4e12-bf8a-191e710bcf39 + cf220409-e37f-4972-adff-79ee4fca7791 intakes @@ -1473,24 +1713,24 @@ ROLE - 9b82bb67-5ad4-4ecd-a127-290dfda83e7e + 1cd45b9b-5114-47f5-8507-913c5643d9db /intakes/*/authorityrefs/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 9b82bb67-5ad4-4ecd-a127-290dfda83e7e + 1cd45b9b-5114-47f5-8507-913c5643d9db /intakes/*/authorityrefs/ @@ -1503,22 +1743,22 @@ ROLE - d6fe2371-3327-4703-a1ea-d7cbed4494a8 + e45486cf-f662-4df3-9861-0f9e4f6b0e93 loansin - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - d6fe2371-3327-4703-a1ea-d7cbed4494a8 + e45486cf-f662-4df3-9861-0f9e4f6b0e93 loansin @@ -1529,24 +1769,24 @@ ROLE - 048bad2c-bfbb-4a1b-bf83-cfdb37669b97 + c229d5c6-0511-4cca-966d-eee83aa7bbbd /loansin/*/authorityrefs/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 048bad2c-bfbb-4a1b-bf83-cfdb37669b97 + c229d5c6-0511-4cca-966d-eee83aa7bbbd /loansin/*/authorityrefs/ @@ -1559,22 +1799,22 @@ ROLE - a5d24649-2028-4b52-8125-9ebf6faf23a6 + 7c43786e-6435-4d44-a9e9-22fa35ef0b65 loansout - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - a5d24649-2028-4b52-8125-9ebf6faf23a6 + 7c43786e-6435-4d44-a9e9-22fa35ef0b65 loansout @@ -1585,24 +1825,24 @@ ROLE - 200637f0-3e8b-491f-ab70-be77de4c930a + bdf664c8-5bfb-45a0-a012-d6e1d40ce472 /loansout/*/authorityrefs/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 200637f0-3e8b-491f-ab70-be77de4c930a + bdf664c8-5bfb-45a0-a012-d6e1d40ce472 /loansout/*/authorityrefs/ @@ -1615,22 +1855,22 @@ ROLE - d4bb0bb9-bb44-4421-992e-328b272458ed + c9a28631-bf84-4b41-a2f9-4095cd412bae movements - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - d4bb0bb9-bb44-4421-992e-328b272458ed + c9a28631-bf84-4b41-a2f9-4095cd412bae movements @@ -1641,24 +1881,24 @@ ROLE - be88af98-a0fc-4d20-a2b8-8d513a16e72f + 46e6d8a7-91ef-4cd6-901a-daec5fe39f02 /movements/*/authorityrefs/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - be88af98-a0fc-4d20-a2b8-8d513a16e72f + 46e6d8a7-91ef-4cd6-901a-daec5fe39f02 /movements/*/authorityrefs/ @@ -1671,22 +1911,22 @@ ROLE - 8d20c65c-9431-43f5-8363-cff22f3f1636 + a18a82b9-f505-418a-afb6-388c4370d129 vocabularies - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 8d20c65c-9431-43f5-8363-cff22f3f1636 + a18a82b9-f505-418a-afb6-388c4370d129 vocabularies @@ -1697,22 +1937,22 @@ ROLE - baae576a-0002-4c7e-8f81-6b8b4de4e446 + 0354b057-3cd7-4ff5-8fa3-8d746d490a58 vocabularyitems - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - baae576a-0002-4c7e-8f81-6b8b4de4e446 + 0354b057-3cd7-4ff5-8fa3-8d746d490a58 vocabularyitems @@ -1723,24 +1963,24 @@ ROLE - 0a23b37e-7f61-4b7a-8675-6d5861f4cd70 + e36dfe3e-e143-47d4-9d13-184acd5d81a5 /vocabularies/*/items/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 0a23b37e-7f61-4b7a-8675-6d5861f4cd70 + e36dfe3e-e143-47d4-9d13-184acd5d81a5 /vocabularies/*/items/ @@ -1753,22 +1993,22 @@ ROLE - 7ef5a389-13fd-4560-9c53-d4016d28fcc7 + dd310d56-6e70-43e9-81d8-af61fad5a761 orgauthorities - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 7ef5a389-13fd-4560-9c53-d4016d28fcc7 + dd310d56-6e70-43e9-81d8-af61fad5a761 orgauthorities @@ -1779,24 +2019,24 @@ ROLE - a9378d8e-326b-455e-a6f5-c63b3edcb22c + 6b903a0b-658b-41ac-9881-5e280c47740d /orgauthorities/*/items/*/authorityrefs/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - a9378d8e-326b-455e-a6f5-c63b3edcb22c + 6b903a0b-658b-41ac-9881-5e280c47740d /orgauthorities/*/items/*/authorityrefs/ @@ -1809,22 +2049,22 @@ ROLE - 018c53e5-d25f-4c1b-bf63-2b0a0bc8e8cb + 43681ada-4538-48a2-8774-f4135b90af93 organizations - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 018c53e5-d25f-4c1b-bf63-2b0a0bc8e8cb + 43681ada-4538-48a2-8774-f4135b90af93 organizations @@ -1835,24 +2075,24 @@ ROLE - c7a00064-ca3e-4f13-a5e1-22d4fba1bf0a + f1b47a46-4e44-44ca-9414-310fade8252e /orgauthorities/*/items/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - c7a00064-ca3e-4f13-a5e1-22d4fba1bf0a + f1b47a46-4e44-44ca-9414-310fade8252e /orgauthorities/*/items/ @@ -1865,24 +2105,24 @@ ROLE - 9b8bd457-f8e6-408c-b9eb-dd67e4c278c2 + 9c6d48e9-4198-4ff5-9726-9fcab6be300b /orgauthorities/*/items/*/refobjs - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 9b8bd457-f8e6-408c-b9eb-dd67e4c278c2 + 9c6d48e9-4198-4ff5-9726-9fcab6be300b /orgauthorities/*/items/*/refobjs @@ -1895,22 +2135,22 @@ ROLE - 97c0948d-fb9e-49d7-b748-86635a21c313 + a17f6316-f5ba-4c74-8f69-397d4e01a7e4 personauthorities - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 97c0948d-fb9e-49d7-b748-86635a21c313 + a17f6316-f5ba-4c74-8f69-397d4e01a7e4 personauthorities @@ -1921,26 +2161,250 @@ ROLE - 23d29e66-624e-4d57-8f94-e26e05747cee + 2b1147d4-9a6a-4197-8e2d-0fae113dc14a + + /personauthorities/*/items/ + + + + 45c752ca-75aa-4801-a65e-5b85119e4dde + ROLE_TENANT_ADMINISTRATOR + + + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 + ROLE_TENANT_ADMINISTRATOR + + + + ROLE + + 2b1147d4-9a6a-4197-8e2d-0fae113dc14a + + /personauthorities/*/items/ + + + + 0 + ROLE_ADMINISTRATOR + + + + ROLE + + 14b2f195-833f-4697-8517-fcdd7a98cd2c + + /personauthorities/*/items/*/refobjs + + + + 45c752ca-75aa-4801-a65e-5b85119e4dde + ROLE_TENANT_ADMINISTRATOR + + + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 + ROLE_TENANT_ADMINISTRATOR + + + + ROLE + + 14b2f195-833f-4697-8517-fcdd7a98cd2c + + /personauthorities/*/items/*/refobjs + + + + 0 + ROLE_ADMINISTRATOR + + + + ROLE + + 16470305-fd33-4ab4-bc71-64408b0a87f7 + persons + + + 45c752ca-75aa-4801-a65e-5b85119e4dde + ROLE_TENANT_ADMINISTRATOR + + + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 + ROLE_TENANT_ADMINISTRATOR + + + + ROLE + + 16470305-fd33-4ab4-bc71-64408b0a87f7 + persons + + + 0 + ROLE_ADMINISTRATOR + + + + ROLE + + 0d2d4594-e913-4948-871b-7ee07db7417d + + /personauthorities/*/items/ + + + + 45c752ca-75aa-4801-a65e-5b85119e4dde + ROLE_TENANT_ADMINISTRATOR + + + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 + ROLE_TENANT_ADMINISTRATOR + + + + ROLE + + 0d2d4594-e913-4948-871b-7ee07db7417d + + /personauthorities/*/items/ + + + + 0 + ROLE_ADMINISTRATOR + + + + ROLE + + b6fd9d4c-b6b2-4bb1-9826-104d409996e6 + locationauthorities + + + 45c752ca-75aa-4801-a65e-5b85119e4dde + ROLE_TENANT_ADMINISTRATOR + + + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 + ROLE_TENANT_ADMINISTRATOR + + + + ROLE + + b6fd9d4c-b6b2-4bb1-9826-104d409996e6 + locationauthorities + + + 0 + ROLE_ADMINISTRATOR + + + + ROLE + + b29dc31a-6ca8-4235-968e-b3e7586c490d + + /locationauthorities/*/items/ + + + + 45c752ca-75aa-4801-a65e-5b85119e4dde + ROLE_TENANT_ADMINISTRATOR + + + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 + ROLE_TENANT_ADMINISTRATOR + + + + ROLE + + b29dc31a-6ca8-4235-968e-b3e7586c490d + + /locationauthorities/*/items/ + + + + 0 + ROLE_ADMINISTRATOR + + + + ROLE + + 80dbadab-228a-4058-8239-e3d12102e7ed + locations + + + 45c752ca-75aa-4801-a65e-5b85119e4dde + ROLE_TENANT_ADMINISTRATOR + + + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 + ROLE_TENANT_ADMINISTRATOR + + + + ROLE + + 80dbadab-228a-4058-8239-e3d12102e7ed + locations + + + 0 + ROLE_ADMINISTRATOR + + + + ROLE + + a66de87b-ec2b-4b47-b3e5-2f0462475371 + acquisitions + + + 45c752ca-75aa-4801-a65e-5b85119e4dde + ROLE_TENANT_ADMINISTRATOR + + + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 + ROLE_TENANT_ADMINISTRATOR + + + + ROLE + + a66de87b-ec2b-4b47-b3e5-2f0462475371 + acquisitions + + + 0 + ROLE_ADMINISTRATOR + + + + ROLE + + 1e611f11-1ba6-4e35-9ded-24cbaaf23ca7 - /personauthorities/*/items/ + /acquisitions/*/authorityrefs/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 23d29e66-624e-4d57-8f94-e26e05747cee + 1e611f11-1ba6-4e35-9ded-24cbaaf23ca7 - /personauthorities/*/items/ + /acquisitions/*/authorityrefs/ @@ -1951,27 +2415,23 @@ ROLE - 4b755790-bc41-4495-aa3f-a523427c0a60 - - /personauthorities/*/items/*/refobjs - + f6a3b97c-9993-4598-a5df-3767ea578570 + relations - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 4b755790-bc41-4495-aa3f-a523427c0a60 - - /personauthorities/*/items/*/refobjs - + f6a3b97c-9993-4598-a5df-3767ea578570 + relations 0 @@ -1981,23 +2441,27 @@ ROLE - 04f61718-653c-4d87-a0e6-9de5b7bbf34a - persons + 3dbe2cfa-c07a-4b31-97f8-fc1b4ed64616 + + /relations/object/* + - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 04f61718-653c-4d87-a0e6-9de5b7bbf34a - persons + 3dbe2cfa-c07a-4b31-97f8-fc1b4ed64616 + + /relations/object/* + 0 @@ -2007,26 +2471,26 @@ ROLE - a3a7c934-e6f5-42b2-bf6c-838cda7aed4c + cb8cdae5-d4fb-4bd2-9258-4fd52ec2a06f - /personauthorities/*/items/ + /relations/object/*/type/* - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - a3a7c934-e6f5-42b2-bf6c-838cda7aed4c + cb8cdae5-d4fb-4bd2-9258-4fd52ec2a06f - /personauthorities/*/items/ + /relations/object/*/type/* @@ -2037,23 +2501,27 @@ ROLE - 6afe06d3-1063-4d8d-859d-6e2aac48aeed - locationauthorities + 74d36c96-b826-46a9-b19b-8b717c27551e + + /relations/subject/* + - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 6afe06d3-1063-4d8d-859d-6e2aac48aeed - locationauthorities + 74d36c96-b826-46a9-b19b-8b717c27551e + + /relations/subject/* + 0 @@ -2063,26 +2531,26 @@ ROLE - 5adb375f-343a-428d-9fc3-6fc57214cc46 + cb2eec62-1160-4103-86a0-1d65d87954c3 - /locationauthorities/*/items/ + /relations/subject/*/type/* - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 5adb375f-343a-428d-9fc3-6fc57214cc46 + cb2eec62-1160-4103-86a0-1d65d87954c3 - /locationauthorities/*/items/ + /relations/subject/*/type/* @@ -2093,23 +2561,27 @@ ROLE - 4ff9d782-ff59-44f5-8c59-6ad046370177 - locations + 8033c19f-ae5b-43d5-a774-2b79d0fe87a8 + + /relations/subject/*/type/*/object/* + - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 4ff9d782-ff59-44f5-8c59-6ad046370177 - locations + 8033c19f-ae5b-43d5-a774-2b79d0fe87a8 + + /relations/subject/*/type/*/object/* + 0 @@ -2119,23 +2591,27 @@ ROLE - c7fc2c86-e755-4f8c-a1ab-5e1bc5fcf556 - acquisitions + 47ecf215-d9f0-4f00-ae60-43b9524f24d9 + + /relations/type/* + - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - c7fc2c86-e755-4f8c-a1ab-5e1bc5fcf556 - acquisitions + 47ecf215-d9f0-4f00-ae60-43b9524f24d9 + + /relations/type/* + 0 @@ -2145,26 +2621,26 @@ ROLE - 41edca48-9f20-42a7-af06-7e536f1bcff1 + 01d1d644-1233-4673-8d98-7d0186379e23 - /acquisitions/*/authorityrefs/ + /relations/type/*/object/* - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 41edca48-9f20-42a7-af06-7e536f1bcff1 + 01d1d644-1233-4673-8d98-7d0186379e23 - /acquisitions/*/authorityrefs/ + /relations/type/*/object/* @@ -2175,23 +2651,27 @@ ROLE - 0e642a75-309f-4354-bd30-69fa7ba319f6 - relations + e475ed0c-0847-40b1-8587-a288db4cf2be + + /relations/type/*/subject/* + - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 0e642a75-309f-4354-bd30-69fa7ba319f6 - relations + e475ed0c-0847-40b1-8587-a288db4cf2be + + /relations/type/*/subject/* + 0 @@ -2201,26 +2681,26 @@ ROLE - d94ebd08-277b-40ea-a655-c2bac9ee9af0 + 8eed5af1-ff30-4877-9405-0e8da8d35b3f - relations/subject/*/type/*/object/* + /relations/type/*/subject/*/object/* - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - d94ebd08-277b-40ea-a655-c2bac9ee9af0 + 8eed5af1-ff30-4877-9405-0e8da8d35b3f - relations/subject/*/type/*/object/* + /relations/type/*/subject/*/object/* @@ -2231,22 +2711,22 @@ ROLE - ea1d3e08-46ea-4be3-9858-a93f260999e1 + f88aad7d-52f6-4622-9f63-37382f83caae accounts - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - ea1d3e08-46ea-4be3-9858-a93f260999e1 + f88aad7d-52f6-4622-9f63-37382f83caae accounts @@ -2257,22 +2737,22 @@ ROLE - f79f2858-bfaf-422c-8490-20db274858ac + 096e6ba8-c0c4-4a5e-b6ae-dd73c44e6351 dimensions - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - f79f2858-bfaf-422c-8490-20db274858ac + 096e6ba8-c0c4-4a5e-b6ae-dd73c44e6351 dimensions @@ -2283,22 +2763,22 @@ ROLE - b3af3ebb-8a1d-43bb-9cd6-cbbbd42957d1 + 995a520f-2f8f-489f-bef1-2dc8edf13fa5 contacts - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - b3af3ebb-8a1d-43bb-9cd6-cbbbd42957d1 + 995a520f-2f8f-489f-bef1-2dc8edf13fa5 contacts @@ -2309,24 +2789,24 @@ ROLE - 9ca70400-e0ee-4fe1-8c05-79cded28218a + adc7794d-b09f-4dfb-9d63-ec1fe406d761 /personauthorities/*/items/*/contacts - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 9ca70400-e0ee-4fe1-8c05-79cded28218a + adc7794d-b09f-4dfb-9d63-ec1fe406d761 /personauthorities/*/items/*/contacts @@ -2339,24 +2819,24 @@ ROLE - 3e181bcc-5346-4303-8ae7-f61218eddeeb + 7dc8fdd5-ad08-4c7e-aa00-c2d625bad83e /orgauthorities/*/items/*/contacts - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 3e181bcc-5346-4303-8ae7-f61218eddeeb + 7dc8fdd5-ad08-4c7e-aa00-c2d625bad83e /orgauthorities/*/items/*/contacts @@ -2369,22 +2849,22 @@ ROLE - 44fc3ac6-9171-4b12-91e7-d91db0c43245 + 1d8cc60c-b508-4afa-a332-fcc78f79b1ab notes - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 44fc3ac6-9171-4b12-91e7-d91db0c43245 + 1d8cc60c-b508-4afa-a332-fcc78f79b1ab notes @@ -2395,22 +2875,22 @@ ROLE - 9210aac1-0a54-4937-98a6-93658b7f7544 + 6fca8fa6-c8e4-4919-9c66-e03c1259268a authorization/roles - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 9210aac1-0a54-4937-98a6-93658b7f7544 + 6fca8fa6-c8e4-4919-9c66-e03c1259268a authorization/roles @@ -2421,22 +2901,22 @@ ROLE - a9b46797-66cd-4162-996a-72dcbdf74376 + 55b2af98-4025-46f1-a593-3a2d5d41ae4d authorization/permissions - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - a9b46797-66cd-4162-996a-72dcbdf74376 + 55b2af98-4025-46f1-a593-3a2d5d41ae4d authorization/permissions @@ -2447,22 +2927,22 @@ ROLE - 8fe974c4-5b78-4314-8a82-47718864c3d8 + 3b6c39aa-6019-4e47-90d4-0ccd613136cb authorization/permissions/permroles - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 8fe974c4-5b78-4314-8a82-47718864c3d8 + 3b6c39aa-6019-4e47-90d4-0ccd613136cb authorization/permissions/permroles @@ -2473,24 +2953,24 @@ ROLE - 89add6ba-b859-4d89-b236-b67261abadb8 + afcd676a-5d42-4437-8db7-e841e8cf524b /authorization/permissions/*/permroles/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 89add6ba-b859-4d89-b236-b67261abadb8 + afcd676a-5d42-4437-8db7-e841e8cf524b /authorization/permissions/*/permroles/ @@ -2503,22 +2983,22 @@ ROLE - 35a63af4-c8f2-4d64-84a5-3877956d09c8 + 911ac4d5-4d9f-45ca-ae1c-108fe857f4f5 accounts/accountroles - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 35a63af4-c8f2-4d64-84a5-3877956d09c8 + 911ac4d5-4d9f-45ca-ae1c-108fe857f4f5 accounts/accountroles @@ -2529,24 +3009,24 @@ ROLE - c17b9a66-43a6-4e5d-95fd-ae17b69cf8a3 + 1bdd955c-52a1-477b-b1da-41cc0c4a703c /accounts/*/accountroles/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - c17b9a66-43a6-4e5d-95fd-ae17b69cf8a3 + 1bdd955c-52a1-477b-b1da-41cc0c4a703c /accounts/*/accountroles/ @@ -2559,22 +3039,22 @@ ROLE - 0de0bc4a-617e-4979-87df-3369dd43a22c + c06ef067-aa93-480f-8b0e-177a740302e9 authorization/roles/permroles - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - 0de0bc4a-617e-4979-87df-3369dd43a22c + c06ef067-aa93-480f-8b0e-177a740302e9 authorization/roles/permroles @@ -2585,24 +3065,24 @@ ROLE - f2f1aa15-9090-4a2d-9014-50f34e961a57 + db89bc4f-fddf-474c-a40f-af1c1d9c9012 /authorization/roles/*/permroles/ - b6af2c74-4238-44e1-b7c5-12b9a262a39e + 45c752ca-75aa-4801-a65e-5b85119e4dde ROLE_TENANT_ADMINISTRATOR - 9e848daa-2b35-444a-871b-95c9b998ed76 + b5c798e6-3c1c-4c86-b9e0-40a5717bb084 ROLE_TENANT_ADMINISTRATOR ROLE - f2f1aa15-9090-4a2d-9014-50f34e961a57 + db89bc4f-fddf-474c-a40f-af1c1d9c9012 /authorization/roles/*/permroles/ @@ -2615,1494 +3095,1766 @@ ROLE - 98073abf-888d-4f00-8c19-38debcebf27f + e321c586-2430-42c0-b749-576426a7e748 idgenerators - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - f14e2b1b-3e14-4cff-917b-6df1cabd2f68 + 08d46fe2-e630-4aa6-81c4-d7ff88425ff3 id - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - cea5e92b-2b59-44f0-b302-fc4a7c7a4655 + 39339b7f-7bdd-48a6-a08a-94ea9ec5dcdf /idgenerators/*/ids - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 3b821c8f-0d13-4065-acb6-8ff3b38988fb + dab0cb0d-cec3-4993-8b57-612a3fc0f990 collectionobjects - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - e82f31a6-5387-4293-80b8-0ad694e7b132 + a16d99c3-e235-42c5-bc13-ff06709ff46d /collectionobjects/*/authorityrefs/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 2667726e-5406-4a05-9035-c79de29864d3 + bdd08bcc-d89c-4aa4-a03f-452da1e82939 intakes - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - d1b8585b-5647-4243-b5da-ef89fbe7a45c + adb7e196-8353-4ac9-859b-d80fdfbd9aa6 /intakes/*/authorityrefs/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 7d7ccb35-3272-4d74-a7a5-a40145454ff4 + 860e93b0-4986-41db-9130-7ac6b7815bd4 loansin - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - f094c722-7d5f-43f6-af7e-a77d752c935d + d03040a4-1d57-4abc-8fc6-ff9b9477bffd /loansin/*/authorityrefs/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - d4e6eb56-4616-45a0-b9e8-78c884830e6b + c8d883dc-c07b-4d66-8df0-207108426257 loansout - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 28b6d76d-a2ad-4f79-883e-f63a932f85eb + 086f839f-0783-4ff1-b5c6-be5f444da4f9 /loansout/*/authorityrefs/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 894f720a-d0df-4438-b0a8-625a23e38e26 + 47a03c57-b6e7-4a50-a66d-e31ab60bf048 movements - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 7aeda5a7-7997-4629-8c9e-0ff1ee2593b6 + 8c13e4af-23ff-4aed-ba2d-716544647f58 /movements/*/authorityrefs/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 4dc16aef-1e22-4756-8c27-fc931dc10b6d + 40fcf4c1-71d2-463a-bc48-de499b5d3406 vocabularies - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 0d1b57c4-178d-48b9-9423-0c01c7f8fb5f + 38718fe4-9f05-4dd7-9012-64c16eef4f90 vocabularyitems - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - bd343314-2399-4bc2-8dc6-f241341592c5 + 1d8a8147-07ef-44b8-9312-2fd1a7e06fdf /vocabularies/*/items/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - cb5db5ab-8435-4b27-8970-5fb2287ba482 + 8b2bd395-541e-4369-8743-b07e4840619a orgauthorities - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 87ff7ced-18ce-45d7-82f7-1a3abcfd858f + e7304ccc-3696-4bdd-bdd9-db569c455582 /orgauthorities/*/items/*/authorityrefs/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - c6d94fa2-2ae0-4c8c-9cce-227189bf87b9 + 98f764c6-33a3-4933-abd3-3ed2c85b916f organizations - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 690f031c-eb94-44d8-a843-83f35e84e871 + a4e0dfb5-8939-4f44-b23a-f88659ed8019 /orgauthorities/*/items/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 9d4ad424-ccce-401a-a954-8d5b796ad723 + 512812bf-2587-4d6c-b87e-8dfbe43ad0e2 /orgauthorities/*/items/*/refobjs - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - e7b233cb-239c-4ce6-b66c-4b7b8ebae3df + d539d845-8151-48ec-910e-5c84e71f9a45 personauthorities - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - c7deb54d-0ceb-4517-bfa1-da2d60563df9 + 9316d182-7ec6-48d2-89be-5b7403d08e27 /personauthorities/*/items/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - d489ef98-d309-4ba7-af0a-ac3ddc30194d + 4a7fafa9-9d50-4097-beea-9df8bcca514d /personauthorities/*/items/*/refobjs - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - ba24b26b-ebc5-477b-9271-bbea2846c1b8 + d4eeaf6b-b988-4a0f-b507-42649c500b13 persons - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 85222bfe-e079-4c2a-bf13-17d5e1d214ab + 90f99e52-15c9-4c81-a576-ebe32f81a86c /personauthorities/*/items/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 9d08eb07-34a5-477f-a420-8d927bb37ee9 + 486dd4ff-248a-4bca-9338-5ca691c32295 locationauthorities - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 1c780d54-247e-4653-99da-ea395d741128 + 318a6a2b-6932-4fcb-a836-fbbef4568077 /locationauthorities/*/items/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 7481a749-d1b6-4627-8a48-95356ee089a7 + 68c1652b-dba0-476c-8b50-1d5729424f55 locations - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 08b97355-3da2-4658-8692-8fc128e6baf5 + 865d8115-dcdb-4063-a0af-8ea52b3adbe8 acquisitions - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - afa330e9-0472-4615-b5a5-2ca6137bef85 + be4b72f4-12e3-40c6-a633-4be38e951077 /acquisitions/*/authorityrefs/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 975606e4-2357-4d2d-a9a5-3cb5e9bcf1b9 + 63bcaf78-bf7f-4604-83bb-4a43bf5dff7d relations - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 + ROLE_TENANT_READER + + + 16a94748-d98b-4a6d-b404-795915856dca + ROLE_TENANT_READER + + + + ROLE + + e26b68bd-4ad1-46c2-8b9a-6af46ac544ed + + /relations/object/* + + + + 58b72cb3-d619-43cb-b58b-853802a09f83 + ROLE_TENANT_READER + + + 16a94748-d98b-4a6d-b404-795915856dca + ROLE_TENANT_READER + + + + ROLE + + 30954e8e-004c-450b-9055-584f49f163e9 + + /relations/object/*/type/* + + + + 58b72cb3-d619-43cb-b58b-853802a09f83 + ROLE_TENANT_READER + + + 16a94748-d98b-4a6d-b404-795915856dca + ROLE_TENANT_READER + + + + ROLE + + 9f78b49d-7431-4790-8281-ede335a50984 + + /relations/subject/* + + + + 58b72cb3-d619-43cb-b58b-853802a09f83 + ROLE_TENANT_READER + + + 16a94748-d98b-4a6d-b404-795915856dca + ROLE_TENANT_READER + + + + ROLE + + bb21d239-2478-4ffe-a3f2-6195dee4a548 + + /relations/subject/*/type/* + + + + 58b72cb3-d619-43cb-b58b-853802a09f83 + ROLE_TENANT_READER + + + 16a94748-d98b-4a6d-b404-795915856dca + ROLE_TENANT_READER + + + + ROLE + + 5b288cd6-d424-4e93-a992-edf27af45128 + + /relations/subject/*/type/*/object/* + + + + 58b72cb3-d619-43cb-b58b-853802a09f83 + ROLE_TENANT_READER + + + 16a94748-d98b-4a6d-b404-795915856dca + ROLE_TENANT_READER + + + + ROLE + + ac3a071c-c330-4d88-b6af-42c7452b0319 + + /relations/type/* + + + + 58b72cb3-d619-43cb-b58b-853802a09f83 + ROLE_TENANT_READER + + + 16a94748-d98b-4a6d-b404-795915856dca + ROLE_TENANT_READER + + + + ROLE + + f62eacf7-22b9-4645-ba7e-ce9ff6d0fb17 + + /relations/type/*/object/* + + + + 58b72cb3-d619-43cb-b58b-853802a09f83 + ROLE_TENANT_READER + + + 16a94748-d98b-4a6d-b404-795915856dca + ROLE_TENANT_READER + + + + ROLE + + 971be36e-03bb-429f-99c7-bac9d4f70946 + + /relations/type/*/subject/* + + + + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 3b0120a4-380a-4834-bf42-e72045445224 + 2b5fca54-1784-4e09-9855-dd26b702843f - relations/subject/*/type/*/object/* + /relations/type/*/subject/*/object/* - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 49bf8151-666c-42f6-95df-f23a9e96280e + a6c84692-086d-4d4f-865f-ec985705ec40 accounts - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - c2d2e876-bb3e-4f06-a198-814721600cf0 + 9ab95f1b-1614-4f97-b7dd-20a9c9631234 dimensions - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 9f37d080-26fa-45ef-be95-a495ab92e553 + 3a095ad3-7df7-45c8-a8fc-bde2b4a98c27 contacts - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 70f4b500-85ce-4939-8797-63a5a2858131 + 6a06422b-3272-4156-8553-bb8f31054c6e /personauthorities/*/items/*/contacts - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 4903240c-2d6c-4063-8d5f-b47cd0d705fa + fad6b2e8-3066-4413-840f-528aad1b1f6c /orgauthorities/*/items/*/contacts - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 0a2808d2-75df-458f-9bc0-4e16950aa8f6 + 732f97f0-6d69-47ba-9732-c1423e3227da notes - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 86b629b9-44ec-4b10-b87c-01cde9cf6377 + c9f23278-e607-44c0-8b24-6e89add3ff0d authorization/roles - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - e3afa6b4-c32d-4188-b2b7-3b999679d194 + bc025d36-19a5-4e36-93a1-0cbc1ccede52 authorization/permissions - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - b3926a79-b7be-4d9f-b606-d810b580d7b3 + 461d7408-c804-49f8-af7c-7b401a8e518c authorization/permissions/permroles - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 1de56ea2-3074-4d86-a786-b6b7c0f138b1 + 8296e36b-f6bb-4b51-90da-f74d7b1e8472 /authorization/permissions/*/permroles/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 0e199368-f16d-44d1-9d88-cc8d89331b5d + a1246699-d944-460b-a1c8-3559726eaaf0 accounts/accountroles - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 6637af57-7731-4615-bcf4-4755638a41ec + b465403b-df78-412b-945e-da9cd7aa7fae /accounts/*/accountroles/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 617e73b5-7859-4e5f-999f-f49455b1b535 + 06fc1611-5945-4171-b0dd-24d6c09076ae authorization/roles/permroles - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 6db54902-aaca-4c5c-9a00-446a972877ae + 6faa1e46-187e-404b-b6a0-36e7939e75f6 /authorization/roles/*/permroles/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 8c293c6a-9869-48ba-9531-a55df3ad6226 + dae14257-70cd-4265-bd04-d6b8df323688 idgenerators - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 26ada9c0-706a-4644-ba58-a65511dc96c2 + ef945684-dd18-47cb-9820-0e92d5dbfe51 id - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - f6f7ff93-8f5c-4632-bde0-14a6608b3db9 + 36ae518f-5dc4-4842-9cfc-88f85adcfc66 /idgenerators/*/ids - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - fccb3c13-19ba-4042-9800-bcb41d6401cb + fb612d1d-8bc1-4120-9540-b7923f34f0e8 collectionobjects - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - ed79d51d-e0b2-480d-8794-068e761680db + c898724b-9b3e-4195-a64f-f115baa5b195 /collectionobjects/*/authorityrefs/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 096f86d8-f09e-4b39-a54a-47b0c65ff6a1 + 2679e06e-6d70-4dc6-aa4e-0923d65f0be8 intakes - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 7c59900c-0ae1-4aa9-b673-cee98ddaa423 + 41be903c-20a8-468e-b23e-545784c55120 /intakes/*/authorityrefs/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - b21411fc-abe3-42ed-ab7f-5a406d301a9e + b83347b9-62f9-4d12-ab88-67ee25544482 loansin - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - c25b5a9e-1b2b-4793-b9f0-b2a75eb0371e + af8adb6c-e517-4f76-aefc-3f98b16eaca7 /loansin/*/authorityrefs/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - a78c8a08-8160-48dc-8a87-fcb2dfd7bd1a + 12ad496e-0ddd-491c-8fc6-bdd95180700b loansout - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - b9197d1c-508d-4202-99ad-c510495a0950 + 9ad3829d-6583-4906-bf8d-6b098246d154 /loansout/*/authorityrefs/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 9d741d9a-4730-413f-8650-c42f808d664b + 9769f7ea-7ecd-413d-814d-3a15701b9be0 movements - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - b1f6df3e-1f08-41a9-8d0c-c09d8e46bbe6 + dc08970a-11ba-48bc-a0fc-f3584757844b /movements/*/authorityrefs/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - b273a380-4c2e-4440-a15f-451dbe35723c + 0cc45625-5602-4847-80f2-138410497249 vocabularies - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 7332cffe-7b60-4b37-905b-63ddec4d5037 + 67254a46-3c03-458d-9cd8-3ac161a99b54 vocabularyitems - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - fd3141a6-8898-4da1-a08b-328ea9e9f406 + 57faed1b-d4d3-4db7-b54f-2806827fc52a /vocabularies/*/items/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - be1c5032-0c58-40ff-ba26-96e151c42c98 + 843f8ef9-2dda-48db-ab9b-de85ef4e7aa5 orgauthorities - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - c03fbda9-af3f-493a-9ba6-4ff863792230 + 20a5fca1-1642-41bf-825e-04e22f9268c6 /orgauthorities/*/items/*/authorityrefs/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - d8b8989d-a3ec-4427-8623-58450124b524 + 00a752c8-4d18-40bd-8f2b-36137516ea5a organizations - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 8fa48282-118c-4772-a9b5-ecad85d87567 + 702522ff-f402-4ea4-9461-97f4d219e38e /orgauthorities/*/items/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 132b61b6-03df-42d9-84fd-61be2a1b6dc5 + 8edf2336-8012-4e82-87de-e259984c87e9 /orgauthorities/*/items/*/refobjs - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 75e53342-f12e-4aa7-a4fb-56fc3b681fa6 + aaaa4a45-e84f-4fea-8a08-e96161296678 personauthorities - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - d7b0b6bc-1fff-41f5-b4b8-a2b0ea975c64 + f82367c7-8c63-4407-89b5-52cd6885fbc1 /personauthorities/*/items/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - e5173476-4cc3-4461-a6f7-ba9031cef9c6 + 18cb3027-92ff-40a9-8257-67565cc0f314 /personauthorities/*/items/*/refobjs - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - c9a5be9a-5278-4593-b490-8fd2ff965609 + acc3b715-ca38-479c-a7f6-91c9d52f4d51 persons - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - aa455324-692a-4b4b-b588-1d1488c3600e + 6f951805-2487-4dcd-904a-b91826a3652f /personauthorities/*/items/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 61775707-4f82-4d9c-accb-b2553b51c991 + 31befe05-de12-41be-9ba2-87f8389c0505 locationauthorities - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - d301837e-0da3-4c45-ad18-0c05e095277e + c1e2d3d2-6379-4d04-8246-45c77532979b /locationauthorities/*/items/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 4d562791-ae17-4c2c-a9fa-45fd2b9ccb92 + 67b2cad8-9589-4843-9363-7442b6b9cd5f locations - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 46383746-c96b-4df8-9964-20b63adcc821 + 1b02adb2-49d7-4f21-a444-6af028149e03 acquisitions - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - f98a8c6e-5b28-44c7-a7c6-cb58b450b496 + b94ee08f-8d1d-48e7-ba41-603c79a5e21c /acquisitions/*/authorityrefs/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - b676b0b8-5931-4241-a498-18bc171c7b3b + 2d10ecd1-2f03-476b-985a-cca3c96544cc relations - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 + ROLE_TENANT_READER + + + 16a94748-d98b-4a6d-b404-795915856dca + ROLE_TENANT_READER + + + + ROLE + + df70e266-1ee9-44d7-89d4-86d1e9aee2c4 + + /relations/object/* + + + + 58b72cb3-d619-43cb-b58b-853802a09f83 + ROLE_TENANT_READER + + + 16a94748-d98b-4a6d-b404-795915856dca + ROLE_TENANT_READER + + + + ROLE + + 13093d51-e8ce-4682-aa36-7229b3c21b80 + + /relations/object/*/type/* + + + + 58b72cb3-d619-43cb-b58b-853802a09f83 + ROLE_TENANT_READER + + + 16a94748-d98b-4a6d-b404-795915856dca + ROLE_TENANT_READER + + + + ROLE + + 76fdf35a-d706-4996-be15-250ac77ee770 + + /relations/subject/* + + + + 58b72cb3-d619-43cb-b58b-853802a09f83 + ROLE_TENANT_READER + + + 16a94748-d98b-4a6d-b404-795915856dca + ROLE_TENANT_READER + + + + ROLE + + f0f7a397-94b7-4b7d-a6ea-7a4081853251 + + /relations/subject/*/type/* + + + + 58b72cb3-d619-43cb-b58b-853802a09f83 + ROLE_TENANT_READER + + + 16a94748-d98b-4a6d-b404-795915856dca + ROLE_TENANT_READER + + + + ROLE + + 32e05c9d-cf05-44d5-ada2-e7d73dc0e71e + + /relations/subject/*/type/*/object/* + + + + 58b72cb3-d619-43cb-b58b-853802a09f83 + ROLE_TENANT_READER + + + 16a94748-d98b-4a6d-b404-795915856dca + ROLE_TENANT_READER + + + + ROLE + + a37297d0-a754-4864-9959-43e6c37efbc9 + + /relations/type/* + + + + 58b72cb3-d619-43cb-b58b-853802a09f83 + ROLE_TENANT_READER + + + 16a94748-d98b-4a6d-b404-795915856dca + ROLE_TENANT_READER + + + + ROLE + + 485a4d84-77be-497d-9f07-c4927cc820a5 + + /relations/type/*/object/* + + + + 58b72cb3-d619-43cb-b58b-853802a09f83 + ROLE_TENANT_READER + + + 16a94748-d98b-4a6d-b404-795915856dca + ROLE_TENANT_READER + + + + ROLE + + cebc18a7-d99e-4594-91f1-b85f208a689a + + /relations/type/*/subject/* + + + + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 57c3bb71-9214-4735-a288-f3c61510f9f9 + bb0df418-4362-4907-99e0-b62fe5d36f4d - relations/subject/*/type/*/object/* + /relations/type/*/subject/*/object/* - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - dba15ac5-babc-489d-8adf-63bd9995f178 + 52843f9e-a2c8-408a-8027-a7448e95f2ea accounts - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - eb056ced-e0a9-4e1c-9cdc-bb16db69f951 + cdbd23ba-c5c4-4d40-9091-794845a271c4 dimensions - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 5cbd95b4-aaea-4872-9826-d6d8f2f1b2be + 9d5ac017-8860-4681-a90a-0383c2f13774 contacts - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 5fb27767-ecd5-47d0-b84f-781da0801244 + 356e6cad-6da4-4c22-9f81-87fd9c9ec307 /personauthorities/*/items/*/contacts - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 444c92c4-20e5-407b-bcd7-e2a531392ff5 + d5f8afc2-0f2a-46b8-a883-a4254d5ab2fb /orgauthorities/*/items/*/contacts - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - e7df87bc-5069-4427-9316-c3365fe42895 + 14c37f47-7f5d-4a97-af84-68ce2339e88b notes - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - a40a21ab-628c-451e-8cde-b12fdbcb68db + 6bf45114-e6e6-4f7a-8c6f-6b536fcb3be2 authorization/roles - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 2395cbea-d6bc-474f-a80a-a9d41c32691f + 6dfc1721-878f-4f4f-afb5-2d068f54bb57 authorization/permissions - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - a72da2cd-549a-45e5-a3c0-5352eef10be0 + 3ae19351-27e2-467a-8c71-4333e509833d authorization/permissions/permroles - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - 2a8f0469-3341-4228-9338-dfd9d46784a9 + 2198327c-6e18-42ad-91a6-c965418cf21b /authorization/permissions/*/permroles/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - eb7565ed-c182-4e90-91e3-50739a46dc64 + 6389a857-acb1-4eba-b4d6-25defe3c8ea9 accounts/accountroles - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - a2e9f79b-b52d-4091-b37d-82985c28b625 + f87ae03c-4720-4788-8e50-185b30ee1086 /accounts/*/accountroles/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - c5f024eb-f512-42e8-894b-4acd26983b45 + 46901444-14d5-4f7a-ad3a-9dc2262aef74 authorization/roles/permroles - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER ROLE - d22a2918-4b1b-44e9-a29b-7524281f93ab + 1fe6ccf4-4276-4d3b-bad4-3fe1bb6c7d0f /authorization/roles/*/permroles/ - f7cf0799-0f99-475b-a429-c7cca1349341 + 58b72cb3-d619-43cb-b58b-853802a09f83 ROLE_TENANT_READER - bbbf085e-3680-4836-a525-52d6d687c1e6 + 16a94748-d98b-4a6d-b404-795915856dca ROLE_TENANT_READER diff --git a/services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml b/services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml index 304f6882a..e5c1917ed 100644 --- a/services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml +++ b/services/authorization-mgt/import/src/main/resources/import-data/import-permissions.xml @@ -1,6 +1,6 @@ - + generated admin permission idgenerators @@ -20,9 +20,9 @@ PERMIT 2 - 2010-06-09T12:04:57.226 + 2010-06-14T11:14:34.845 - + generated admin permission id @@ -42,9 +42,9 @@ PERMIT 2 - 2010-06-09T12:04:57.228 + 2010-06-14T11:14:34.846 - + generated admin permission /idgenerators/*/ids @@ -66,9 +66,9 @@ PERMIT 2 - 2010-06-09T12:04:57.228 + 2010-06-14T11:14:34.847 - + generated admin permission collectionobjects @@ -88,9 +88,9 @@ PERMIT 2 - 2010-06-09T12:04:57.229 + 2010-06-14T11:14:34.847 - + generated admin permission /collectionobjects/*/authorityrefs/ @@ -112,9 +112,9 @@ PERMIT 2 - 2010-06-09T12:04:57.229 + 2010-06-14T11:14:34.847 - + generated admin permission intakes @@ -134,9 +134,9 @@ PERMIT 2 - 2010-06-09T12:04:57.229 + 2010-06-14T11:14:34.848 - + generated admin permission /intakes/*/authorityrefs/ @@ -158,9 +158,9 @@ PERMIT 2 - 2010-06-09T12:04:57.230 + 2010-06-14T11:14:34.848 - + generated admin permission loansin @@ -180,9 +180,9 @@ PERMIT 2 - 2010-06-09T12:04:57.230 + 2010-06-14T11:14:34.848 - + generated admin permission /loansin/*/authorityrefs/ @@ -204,9 +204,9 @@ PERMIT 2 - 2010-06-09T12:04:57.232 + 2010-06-14T11:14:34.849 - + generated admin permission loansout @@ -226,9 +226,9 @@ PERMIT 2 - 2010-06-09T12:04:57.233 + 2010-06-14T11:14:34.849 - + generated admin permission /loansout/*/authorityrefs/ @@ -250,9 +250,9 @@ PERMIT 2 - 2010-06-09T12:04:57.233 + 2010-06-14T11:14:34.850 - + generated admin permission movements @@ -272,9 +272,9 @@ PERMIT 2 - 2010-06-09T12:04:57.234 + 2010-06-14T11:14:34.850 - + generated admin permission /movements/*/authorityrefs/ @@ -296,9 +296,9 @@ PERMIT 2 - 2010-06-09T12:04:57.234 + 2010-06-14T11:14:34.851 - + generated admin permission vocabularies @@ -318,9 +318,9 @@ PERMIT 2 - 2010-06-09T12:04:57.234 + 2010-06-14T11:14:34.851 - + generated admin permission vocabularyitems @@ -340,9 +340,9 @@ PERMIT 2 - 2010-06-09T12:04:57.235 + 2010-06-14T11:14:34.851 - + generated admin permission /vocabularies/*/items/ @@ -364,9 +364,9 @@ PERMIT 2 - 2010-06-09T12:04:57.235 + 2010-06-14T11:14:34.852 - + generated admin permission orgauthorities @@ -386,9 +386,9 @@ PERMIT 2 - 2010-06-09T12:04:57.235 + 2010-06-14T11:14:34.852 - + generated admin permission /orgauthorities/*/items/*/authorityrefs/ @@ -410,9 +410,9 @@ PERMIT 2 - 2010-06-09T12:04:57.235 + 2010-06-14T11:14:34.853 - + generated admin permission organizations @@ -432,9 +432,9 @@ PERMIT 2 - 2010-06-09T12:04:57.236 + 2010-06-14T11:14:34.853 - + generated admin permission /orgauthorities/*/items/ @@ -456,9 +456,9 @@ PERMIT 2 - 2010-06-09T12:04:57.236 + 2010-06-14T11:14:34.853 - + generated admin permission /orgauthorities/*/items/*/refobjs @@ -480,9 +480,9 @@ PERMIT 2 - 2010-06-09T12:04:57.236 + 2010-06-14T11:14:34.854 - + generated admin permission personauthorities @@ -502,9 +502,9 @@ PERMIT 2 - 2010-06-09T12:04:57.236 + 2010-06-14T11:14:34.854 - + generated admin permission /personauthorities/*/items/ @@ -526,9 +526,9 @@ PERMIT 2 - 2010-06-09T12:04:57.237 + 2010-06-14T11:14:34.854 - + generated admin permission /personauthorities/*/items/*/refobjs @@ -550,9 +550,9 @@ PERMIT 2 - 2010-06-09T12:04:57.237 + 2010-06-14T11:14:34.855 - + generated admin permission persons @@ -572,9 +572,9 @@ PERMIT 2 - 2010-06-09T12:04:57.237 + 2010-06-14T11:14:34.855 - + generated admin permission /personauthorities/*/items/ @@ -596,9 +596,9 @@ PERMIT 2 - 2010-06-09T12:04:57.238 + 2010-06-14T11:14:34.855 - + generated admin permission locationauthorities @@ -618,9 +618,9 @@ PERMIT 2 - 2010-06-09T12:04:57.239 + 2010-06-14T11:14:34.856 - + generated admin permission /locationauthorities/*/items/ @@ -642,9 +642,9 @@ PERMIT 2 - 2010-06-09T12:04:57.239 + 2010-06-14T11:14:34.856 - + generated admin permission locations @@ -664,9 +664,9 @@ PERMIT 2 - 2010-06-09T12:04:57.239 + 2010-06-14T11:14:34.856 - + generated admin permission acquisitions @@ -686,9 +686,9 @@ PERMIT 2 - 2010-06-09T12:04:57.239 + 2010-06-14T11:14:34.857 - + generated admin permission /acquisitions/*/authorityrefs/ @@ -710,9 +710,9 @@ PERMIT 2 - 2010-06-09T12:04:57.240 + 2010-06-14T11:14:34.857 - + generated admin permission relations @@ -732,12 +732,12 @@ PERMIT 2 - 2010-06-09T12:04:57.240 + 2010-06-14T11:14:34.857 - + generated admin permission - relations/subject/*/type/*/object/* + /relations/object/* CREATE @@ -756,9 +756,201 @@ PERMIT 2 - 2010-06-09T12:04:57.240 + 2010-06-14T11:14:34.858 - + + generated admin permission + + /relations/object/*/type/* + + + CREATE + + + READ + + + UPDATE + + + DELETE + + + SEARCH + + PERMIT + 2 + 2010-06-14T11:14:34.858 + + + generated admin permission + + /relations/subject/* + + + CREATE + + + READ + + + UPDATE + + + DELETE + + + SEARCH + + PERMIT + 2 + 2010-06-14T11:14:34.858 + + + generated admin permission + + /relations/subject/*/type/* + + + CREATE + + + READ + + + UPDATE + + + DELETE + + + SEARCH + + PERMIT + 2 + 2010-06-14T11:14:34.859 + + + generated admin permission + + /relations/subject/*/type/*/object/* + + + CREATE + + + READ + + + UPDATE + + + DELETE + + + SEARCH + + PERMIT + 2 + 2010-06-14T11:14:34.859 + + + generated admin permission + + /relations/type/* + + + CREATE + + + READ + + + UPDATE + + + DELETE + + + SEARCH + + PERMIT + 2 + 2010-06-14T11:14:34.859 + + + generated admin permission + + /relations/type/*/object/* + + + CREATE + + + READ + + + UPDATE + + + DELETE + + + SEARCH + + PERMIT + 2 + 2010-06-14T11:14:34.860 + + + generated admin permission + + /relations/type/*/subject/* + + + CREATE + + + READ + + + UPDATE + + + DELETE + + + SEARCH + + PERMIT + 2 + 2010-06-14T11:14:34.860 + + + generated admin permission + + /relations/type/*/subject/*/object/* + + + CREATE + + + READ + + + UPDATE + + + DELETE + + + SEARCH + + PERMIT + 2 + 2010-06-14T11:14:34.860 + + generated admin permission accounts @@ -778,9 +970,9 @@ PERMIT 2 - 2010-06-09T12:04:57.240 + 2010-06-14T11:14:34.861 - + generated admin permission dimensions @@ -800,9 +992,9 @@ PERMIT 2 - 2010-06-09T12:04:57.241 + 2010-06-14T11:14:34.861 - + generated admin permission contacts @@ -822,9 +1014,9 @@ PERMIT 2 - 2010-06-09T12:04:57.241 + 2010-06-14T11:14:34.861 - + generated admin permission /personauthorities/*/items/*/contacts @@ -846,9 +1038,9 @@ PERMIT 2 - 2010-06-09T12:04:57.242 + 2010-06-14T11:14:34.862 - + generated admin permission /orgauthorities/*/items/*/contacts @@ -870,9 +1062,9 @@ PERMIT 2 - 2010-06-09T12:04:57.242 + 2010-06-14T11:14:34.862 - + generated admin permission notes @@ -892,9 +1084,9 @@ PERMIT 2 - 2010-06-09T12:04:57.242 + 2010-06-14T11:14:34.862 - + generated admin permission authorization/roles @@ -914,9 +1106,9 @@ PERMIT 2 - 2010-06-09T12:04:57.243 + 2010-06-14T11:14:34.863 - + generated admin permission authorization/permissions @@ -936,9 +1128,9 @@ PERMIT 2 - 2010-06-09T12:04:57.243 + 2010-06-14T11:14:34.863 - + generated admin permission authorization/permissions/permroles @@ -958,9 +1150,9 @@ PERMIT 2 - 2010-06-09T12:04:57.243 + 2010-06-14T11:14:34.863 - + generated admin permission /authorization/permissions/*/permroles/ @@ -982,9 +1174,9 @@ PERMIT 2 - 2010-06-09T12:04:57.243 + 2010-06-14T11:14:34.863 - + generated admin permission accounts/accountroles @@ -1004,9 +1196,9 @@ PERMIT 2 - 2010-06-09T12:04:57.244 + 2010-06-14T11:14:34.864 - + generated admin permission /accounts/*/accountroles/ @@ -1028,9 +1220,9 @@ PERMIT 2 - 2010-06-09T12:04:57.244 + 2010-06-14T11:14:34.864 - + generated admin permission authorization/roles/permroles @@ -1050,9 +1242,9 @@ PERMIT 2 - 2010-06-09T12:04:57.244 + 2010-06-14T11:14:34.864 - + generated admin permission /authorization/roles/*/permroles/ @@ -1074,9 +1266,9 @@ PERMIT 2 - 2010-06-09T12:04:57.244 + 2010-06-14T11:14:34.864 - + generated admin permission idgenerators @@ -1096,9 +1288,9 @@ PERMIT 1 - 2010-06-09T12:04:57.275 + 2010-06-14T11:14:34.877 - + generated admin permission id @@ -1118,9 +1310,9 @@ PERMIT 1 - 2010-06-09T12:04:57.275 + 2010-06-14T11:14:34.877 - + generated admin permission /idgenerators/*/ids @@ -1142,9 +1334,9 @@ PERMIT 1 - 2010-06-09T12:04:57.276 + 2010-06-14T11:14:34.878 - + generated admin permission collectionobjects @@ -1164,9 +1356,9 @@ PERMIT 1 - 2010-06-09T12:04:57.276 + 2010-06-14T11:14:34.878 - + generated admin permission /collectionobjects/*/authorityrefs/ @@ -1188,9 +1380,9 @@ PERMIT 1 - 2010-06-09T12:04:57.279 + 2010-06-14T11:14:34.878 - + generated admin permission intakes @@ -1210,9 +1402,9 @@ PERMIT 1 - 2010-06-09T12:04:57.280 + 2010-06-14T11:14:34.878 - + generated admin permission /intakes/*/authorityrefs/ @@ -1234,9 +1426,9 @@ PERMIT 1 - 2010-06-09T12:04:57.280 + 2010-06-14T11:14:34.878 - + generated admin permission loansin @@ -1256,13 +1448,195 @@ PERMIT 1 - 2010-06-09T12:04:57.280 + 2010-06-14T11:14:34.879 + + + generated admin permission + + /loansin/*/authorityrefs/ + + + CREATE + + + READ + + + UPDATE + + + DELETE + + + SEARCH + + PERMIT + 1 + 2010-06-14T11:14:34.879 + + + generated admin permission + loansout + + CREATE + + + READ + + + UPDATE + + + DELETE + + + SEARCH + + PERMIT + 1 + 2010-06-14T11:14:34.879 + + + generated admin permission + + /loansout/*/authorityrefs/ + + + CREATE + + + READ + + + UPDATE + + + DELETE + + + SEARCH + + PERMIT + 1 + 2010-06-14T11:14:34.879 + + + generated admin permission + movements + + CREATE + + + READ + + + UPDATE + + + DELETE + + + SEARCH + + PERMIT + 1 + 2010-06-14T11:14:34.879 + + + generated admin permission + + /movements/*/authorityrefs/ + + + CREATE + + + READ + + + UPDATE + + + DELETE + + + SEARCH + + PERMIT + 1 + 2010-06-14T11:14:34.880 + + + generated admin permission + vocabularies + + CREATE + + + READ + + + UPDATE + + + DELETE + + + SEARCH + + PERMIT + 1 + 2010-06-14T11:14:34.880 + + + generated admin permission + vocabularyitems + + CREATE + + + READ + + + UPDATE + + + DELETE + + + SEARCH + + PERMIT + 1 + 2010-06-14T11:14:34.880 + + + generated admin permission + + /vocabularies/*/items/ + + + CREATE + + + READ + + + UPDATE + + + DELETE + + + SEARCH + + PERMIT + 1 + 2010-06-14T11:14:34.880 - + generated admin permission - - /loansin/*/authorityrefs/ - + orgauthorities CREATE @@ -1280,11 +1654,13 @@ PERMIT 1 - 2010-06-09T12:04:57.281 + 2010-06-14T11:14:34.880 - + generated admin permission - loansout + + /orgauthorities/*/items/*/authorityrefs/ + CREATE @@ -1302,13 +1678,11 @@ PERMIT 1 - 2010-06-09T12:04:57.281 + 2010-06-14T11:14:34.881 - + generated admin permission - - /loansout/*/authorityrefs/ - + organizations CREATE @@ -1326,11 +1700,13 @@ PERMIT 1 - 2010-06-09T12:04:57.281 + 2010-06-14T11:14:34.881 - + generated admin permission - movements + + /orgauthorities/*/items/ + CREATE @@ -1348,12 +1724,12 @@ PERMIT 1 - 2010-06-09T12:04:57.281 + 2010-06-14T11:14:34.881 - + generated admin permission - /movements/*/authorityrefs/ + /orgauthorities/*/items/*/refobjs CREATE @@ -1372,11 +1748,11 @@ PERMIT 1 - 2010-06-09T12:04:57.282 + 2010-06-14T11:14:34.881 - + generated admin permission - vocabularies + personauthorities CREATE @@ -1394,11 +1770,13 @@ PERMIT 1 - 2010-06-09T12:04:57.282 + 2010-06-14T11:14:34.881 - + generated admin permission - vocabularyitems + + /personauthorities/*/items/ + CREATE @@ -1416,12 +1794,12 @@ PERMIT 1 - 2010-06-09T12:04:57.282 + 2010-06-14T11:14:34.881 - + generated admin permission - /vocabularies/*/items/ + /personauthorities/*/items/*/refobjs CREATE @@ -1440,11 +1818,11 @@ PERMIT 1 - 2010-06-09T12:04:57.282 + 2010-06-14T11:14:34.882 - + generated admin permission - orgauthorities + persons CREATE @@ -1462,12 +1840,12 @@ PERMIT 1 - 2010-06-09T12:04:57.283 + 2010-06-14T11:14:34.882 - + generated admin permission - /orgauthorities/*/items/*/authorityrefs/ + /personauthorities/*/items/ CREATE @@ -1486,11 +1864,11 @@ PERMIT 1 - 2010-06-09T12:04:57.283 + 2010-06-14T11:14:34.882 - + generated admin permission - organizations + locationauthorities CREATE @@ -1508,12 +1886,12 @@ PERMIT 1 - 2010-06-09T12:04:57.283 + 2010-06-14T11:14:34.882 - + generated admin permission - /orgauthorities/*/items/ + /locationauthorities/*/items/ CREATE @@ -1532,13 +1910,11 @@ PERMIT 1 - 2010-06-09T12:04:57.283 + 2010-06-14T11:14:34.882 - + generated admin permission - - /orgauthorities/*/items/*/refobjs - + locations CREATE @@ -1556,11 +1932,11 @@ PERMIT 1 - 2010-06-09T12:04:57.284 + 2010-06-14T11:14:34.883 - + generated admin permission - personauthorities + acquisitions CREATE @@ -1578,12 +1954,12 @@ PERMIT 1 - 2010-06-09T12:04:57.284 + 2010-06-14T11:14:34.883 - + generated admin permission - /personauthorities/*/items/ + /acquisitions/*/authorityrefs/ CREATE @@ -1602,13 +1978,11 @@ PERMIT 1 - 2010-06-09T12:04:57.284 + 2010-06-14T11:14:34.883 - + generated admin permission - - /personauthorities/*/items/*/refobjs - + relations CREATE @@ -1626,11 +2000,13 @@ PERMIT 1 - 2010-06-09T12:04:57.284 + 2010-06-14T11:14:34.883 - + generated admin permission - persons + + /relations/object/* + CREATE @@ -1648,12 +2024,12 @@ PERMIT 1 - 2010-06-09T12:04:57.285 + 2010-06-14T11:14:34.883 - + generated admin permission - /personauthorities/*/items/ + /relations/object/*/type/* CREATE @@ -1672,11 +2048,13 @@ PERMIT 1 - 2010-06-09T12:04:57.285 + 2010-06-14T11:14:34.884 - + generated admin permission - locationauthorities + + /relations/subject/* + CREATE @@ -1694,12 +2072,12 @@ PERMIT 1 - 2010-06-09T12:04:57.285 + 2010-06-14T11:14:34.884 - + generated admin permission - /locationauthorities/*/items/ + /relations/subject/*/type/* CREATE @@ -1718,11 +2096,13 @@ PERMIT 1 - 2010-06-09T12:04:57.286 + 2010-06-14T11:14:34.884 - + generated admin permission - locations + + /relations/subject/*/type/*/object/* + CREATE @@ -1740,11 +2120,13 @@ PERMIT 1 - 2010-06-09T12:04:57.286 + 2010-06-14T11:14:34.884 - + generated admin permission - acquisitions + + /relations/type/* + CREATE @@ -1762,12 +2144,12 @@ PERMIT 1 - 2010-06-09T12:04:57.286 + 2010-06-14T11:14:34.884 - + generated admin permission - /acquisitions/*/authorityrefs/ + /relations/type/*/object/* CREATE @@ -1786,11 +2168,13 @@ PERMIT 1 - 2010-06-09T12:04:57.286 + 2010-06-14T11:14:34.885 - + generated admin permission - relations + + /relations/type/*/subject/* + CREATE @@ -1808,12 +2192,12 @@ PERMIT 1 - 2010-06-09T12:04:57.287 + 2010-06-14T11:14:34.885 - + generated admin permission - relations/subject/*/type/*/object/* + /relations/type/*/subject/*/object/* CREATE @@ -1832,9 +2216,9 @@ PERMIT 1 - 2010-06-09T12:04:57.287 + 2010-06-14T11:14:34.885 - + generated admin permission accounts @@ -1854,9 +2238,9 @@ PERMIT 1 - 2010-06-09T12:04:57.287 + 2010-06-14T11:14:34.885 - + generated admin permission dimensions @@ -1876,9 +2260,9 @@ PERMIT 1 - 2010-06-09T12:04:57.287 + 2010-06-14T11:14:34.885 - + generated admin permission contacts @@ -1898,9 +2282,9 @@ PERMIT 1 - 2010-06-09T12:04:57.288 + 2010-06-14T11:14:34.886 - + generated admin permission /personauthorities/*/items/*/contacts @@ -1922,9 +2306,9 @@ PERMIT 1 - 2010-06-09T12:04:57.288 + 2010-06-14T11:14:34.886 - + generated admin permission /orgauthorities/*/items/*/contacts @@ -1946,9 +2330,9 @@ PERMIT 1 - 2010-06-09T12:04:57.288 + 2010-06-14T11:14:34.886 - + generated admin permission notes @@ -1968,9 +2352,9 @@ PERMIT 1 - 2010-06-09T12:04:57.288 + 2010-06-14T11:14:34.886 - + generated admin permission authorization/roles @@ -1990,9 +2374,9 @@ PERMIT 1 - 2010-06-09T12:04:57.289 + 2010-06-14T11:14:34.886 - + generated admin permission authorization/permissions @@ -2012,9 +2396,9 @@ PERMIT 1 - 2010-06-09T12:04:57.289 + 2010-06-14T11:14:34.887 - + generated admin permission authorization/permissions/permroles @@ -2034,9 +2418,9 @@ PERMIT 1 - 2010-06-09T12:04:57.289 + 2010-06-14T11:14:34.887 - + generated admin permission /authorization/permissions/*/permroles/ @@ -2058,9 +2442,9 @@ PERMIT 1 - 2010-06-09T12:04:57.290 + 2010-06-14T11:14:34.887 - + generated admin permission accounts/accountroles @@ -2080,9 +2464,9 @@ PERMIT 1 - 2010-06-09T12:04:57.290 + 2010-06-14T11:14:34.887 - + generated admin permission /accounts/*/accountroles/ @@ -2104,9 +2488,9 @@ PERMIT 1 - 2010-06-09T12:04:57.290 + 2010-06-14T11:14:34.887 - + generated admin permission authorization/roles/permroles @@ -2126,9 +2510,9 @@ PERMIT 1 - 2010-06-09T12:04:57.290 + 2010-06-14T11:14:34.888 - + generated admin permission /authorization/roles/*/permroles/ @@ -2150,9 +2534,9 @@ PERMIT 1 - 2010-06-09T12:04:57.291 + 2010-06-14T11:14:34.888 - + generated readonly permission idgenerators @@ -2163,9 +2547,9 @@ PERMIT 2 - 2010-06-09T12:04:57.245 + 2010-06-14T11:14:34.864 - + generated readonly permission id @@ -2176,9 +2560,9 @@ PERMIT 2 - 2010-06-09T12:04:57.245 + 2010-06-14T11:14:34.865 - + generated readonly permission /idgenerators/*/ids @@ -2191,9 +2575,9 @@ PERMIT 2 - 2010-06-09T12:04:57.245 + 2010-06-14T11:14:34.865 - + generated readonly permission collectionobjects @@ -2204,9 +2588,9 @@ PERMIT 2 - 2010-06-09T12:04:57.245 + 2010-06-14T11:14:34.865 - + generated readonly permission /collectionobjects/*/authorityrefs/ @@ -2219,9 +2603,9 @@ PERMIT 2 - 2010-06-09T12:04:57.246 + 2010-06-14T11:14:34.865 - + generated readonly permission intakes @@ -2232,9 +2616,9 @@ PERMIT 2 - 2010-06-09T12:04:57.246 + 2010-06-14T11:14:34.866 - + generated readonly permission /intakes/*/authorityrefs/ @@ -2247,9 +2631,9 @@ PERMIT 2 - 2010-06-09T12:04:57.246 + 2010-06-14T11:14:34.866 - + generated readonly permission loansin @@ -2260,9 +2644,9 @@ PERMIT 2 - 2010-06-09T12:04:57.247 + 2010-06-14T11:14:34.866 - + generated readonly permission /loansin/*/authorityrefs/ @@ -2275,9 +2659,9 @@ PERMIT 2 - 2010-06-09T12:04:57.247 + 2010-06-14T11:14:34.866 - + generated readonly permission loansout @@ -2288,9 +2672,9 @@ PERMIT 2 - 2010-06-09T12:04:57.247 + 2010-06-14T11:14:34.866 - + generated readonly permission /loansout/*/authorityrefs/ @@ -2303,9 +2687,9 @@ PERMIT 2 - 2010-06-09T12:04:57.248 + 2010-06-14T11:14:34.867 - + generated readonly permission movements @@ -2316,9 +2700,9 @@ PERMIT 2 - 2010-06-09T12:04:57.248 + 2010-06-14T11:14:34.867 - + generated readonly permission /movements/*/authorityrefs/ @@ -2331,9 +2715,9 @@ PERMIT 2 - 2010-06-09T12:04:57.257 + 2010-06-14T11:14:34.867 - + generated readonly permission vocabularies @@ -2344,9 +2728,9 @@ PERMIT 2 - 2010-06-09T12:04:57.258 + 2010-06-14T11:14:34.867 - + generated readonly permission vocabularyitems @@ -2357,9 +2741,9 @@ PERMIT 2 - 2010-06-09T12:04:57.258 + 2010-06-14T11:14:34.868 - + generated readonly permission /vocabularies/*/items/ @@ -2372,9 +2756,9 @@ PERMIT 2 - 2010-06-09T12:04:57.258 + 2010-06-14T11:14:34.868 - + generated readonly permission orgauthorities @@ -2385,9 +2769,9 @@ PERMIT 2 - 2010-06-09T12:04:57.259 + 2010-06-14T11:14:34.868 - + generated readonly permission /orgauthorities/*/items/*/authorityrefs/ @@ -2400,9 +2784,9 @@ PERMIT 2 - 2010-06-09T12:04:57.259 + 2010-06-14T11:14:34.868 - + generated readonly permission organizations @@ -2413,9 +2797,9 @@ PERMIT 2 - 2010-06-09T12:04:57.259 + 2010-06-14T11:14:34.868 - + generated readonly permission /orgauthorities/*/items/ @@ -2428,9 +2812,9 @@ PERMIT 2 - 2010-06-09T12:04:57.260 + 2010-06-14T11:14:34.869 - + generated readonly permission /orgauthorities/*/items/*/refobjs @@ -2443,9 +2827,9 @@ PERMIT 2 - 2010-06-09T12:04:57.260 + 2010-06-14T11:14:34.869 - + generated readonly permission personauthorities @@ -2456,9 +2840,9 @@ PERMIT 2 - 2010-06-09T12:04:57.260 + 2010-06-14T11:14:34.869 - + generated readonly permission /personauthorities/*/items/ @@ -2471,9 +2855,9 @@ PERMIT 2 - 2010-06-09T12:04:57.261 + 2010-06-14T11:14:34.870 - + generated readonly permission /personauthorities/*/items/*/refobjs @@ -2486,9 +2870,9 @@ PERMIT 2 - 2010-06-09T12:04:57.261 + 2010-06-14T11:14:34.870 - + generated readonly permission persons @@ -2499,9 +2883,9 @@ PERMIT 2 - 2010-06-09T12:04:57.261 + 2010-06-14T11:14:34.870 - + generated readonly permission /personauthorities/*/items/ @@ -2514,9 +2898,9 @@ PERMIT 2 - 2010-06-09T12:04:57.262 + 2010-06-14T11:14:34.870 - + generated readonly permission locationauthorities @@ -2527,9 +2911,9 @@ PERMIT 2 - 2010-06-09T12:04:57.262 + 2010-06-14T11:14:34.871 - + generated readonly permission /locationauthorities/*/items/ @@ -2542,9 +2926,9 @@ PERMIT 2 - 2010-06-09T12:04:57.262 + 2010-06-14T11:14:34.871 - + generated readonly permission locations @@ -2555,9 +2939,9 @@ PERMIT 2 - 2010-06-09T12:04:57.263 + 2010-06-14T11:14:34.871 - + generated readonly permission acquisitions @@ -2568,9 +2952,9 @@ PERMIT 2 - 2010-06-09T12:04:57.263 + 2010-06-14T11:14:34.871 - + generated readonly permission /acquisitions/*/authorityrefs/ @@ -2583,9 +2967,9 @@ PERMIT 2 - 2010-06-09T12:04:57.264 + 2010-06-14T11:14:34.871 - + generated readonly permission relations @@ -2596,12 +2980,132 @@ PERMIT 2 - 2010-06-09T12:04:57.268 + 2010-06-14T11:14:34.872 + + + generated readonly permission + + /relations/object/* + + + READ + + + SEARCH + + PERMIT + 2 + 2010-06-14T11:14:34.872 + + + generated readonly permission + + /relations/object/*/type/* + + + READ + + + SEARCH + + PERMIT + 2 + 2010-06-14T11:14:34.872 + + + generated readonly permission + + /relations/subject/* + + + READ + + + SEARCH + + PERMIT + 2 + 2010-06-14T11:14:34.873 + + + generated readonly permission + + /relations/subject/*/type/* + + + READ + + + SEARCH + + PERMIT + 2 + 2010-06-14T11:14:34.873 + + + generated readonly permission + + /relations/subject/*/type/*/object/* + + + READ + + + SEARCH + + PERMIT + 2 + 2010-06-14T11:14:34.873 + + + generated readonly permission + + /relations/type/* + + + READ + + + SEARCH + + PERMIT + 2 + 2010-06-14T11:14:34.873 + + + generated readonly permission + + /relations/type/*/object/* + + + READ + + + SEARCH + + PERMIT + 2 + 2010-06-14T11:14:34.874 + + + generated readonly permission + + /relations/type/*/subject/* + + + READ + + + SEARCH + + PERMIT + 2 + 2010-06-14T11:14:34.874 - + generated readonly permission - relations/subject/*/type/*/object/* + /relations/type/*/subject/*/object/* READ @@ -2611,9 +3115,9 @@ PERMIT 2 - 2010-06-09T12:04:57.268 + 2010-06-14T11:14:34.874 - + generated readonly permission accounts @@ -2624,9 +3128,9 @@ PERMIT 2 - 2010-06-09T12:04:57.269 + 2010-06-14T11:14:34.874 - + generated readonly permission dimensions @@ -2637,9 +3141,9 @@ PERMIT 2 - 2010-06-09T12:04:57.271 + 2010-06-14T11:14:34.875 - + generated readonly permission contacts @@ -2650,9 +3154,9 @@ PERMIT 2 - 2010-06-09T12:04:57.271 + 2010-06-14T11:14:34.875 - + generated readonly permission /personauthorities/*/items/*/contacts @@ -2665,9 +3169,9 @@ PERMIT 2 - 2010-06-09T12:04:57.271 + 2010-06-14T11:14:34.875 - + generated readonly permission /orgauthorities/*/items/*/contacts @@ -2680,9 +3184,9 @@ PERMIT 2 - 2010-06-09T12:04:57.272 + 2010-06-14T11:14:34.875 - + generated readonly permission notes @@ -2693,9 +3197,9 @@ PERMIT 2 - 2010-06-09T12:04:57.272 + 2010-06-14T11:14:34.875 - + generated readonly permission authorization/roles @@ -2706,9 +3210,9 @@ PERMIT 2 - 2010-06-09T12:04:57.273 + 2010-06-14T11:14:34.876 - + generated readonly permission authorization/permissions @@ -2719,9 +3223,9 @@ PERMIT 2 - 2010-06-09T12:04:57.273 + 2010-06-14T11:14:34.876 - + generated readonly permission authorization/permissions/permroles @@ -2732,9 +3236,9 @@ PERMIT 2 - 2010-06-09T12:04:57.273 + 2010-06-14T11:14:34.876 - + generated readonly permission /authorization/permissions/*/permroles/ @@ -2747,9 +3251,9 @@ PERMIT 2 - 2010-06-09T12:04:57.274 + 2010-06-14T11:14:34.876 - + generated readonly permission accounts/accountroles @@ -2760,9 +3264,9 @@ PERMIT 2 - 2010-06-09T12:04:57.274 + 2010-06-14T11:14:34.876 - + generated readonly permission /accounts/*/accountroles/ @@ -2775,9 +3279,9 @@ PERMIT 2 - 2010-06-09T12:04:57.274 + 2010-06-14T11:14:34.877 - + generated readonly permission authorization/roles/permroles @@ -2788,9 +3292,9 @@ PERMIT 2 - 2010-06-09T12:04:57.275 + 2010-06-14T11:14:34.877 - + generated readonly permission /authorization/roles/*/permroles/ @@ -2803,9 +3307,9 @@ PERMIT 2 - 2010-06-09T12:04:57.275 + 2010-06-14T11:14:34.877 - + generated readonly permission idgenerators @@ -2816,9 +3320,9 @@ PERMIT 1 - 2010-06-09T12:04:57.291 + 2010-06-14T11:14:34.888 - + generated readonly permission id @@ -2829,9 +3333,9 @@ PERMIT 1 - 2010-06-09T12:04:57.291 + 2010-06-14T11:14:34.888 - + generated readonly permission /idgenerators/*/ids @@ -2844,9 +3348,9 @@ PERMIT 1 - 2010-06-09T12:04:57.291 + 2010-06-14T11:14:34.888 - + generated readonly permission collectionobjects @@ -2857,9 +3361,9 @@ PERMIT 1 - 2010-06-09T12:04:57.292 + 2010-06-14T11:14:34.889 - + generated readonly permission /collectionobjects/*/authorityrefs/ @@ -2872,9 +3376,9 @@ PERMIT 1 - 2010-06-09T12:04:57.292 + 2010-06-14T11:14:34.889 - + generated readonly permission intakes @@ -2885,9 +3389,9 @@ PERMIT 1 - 2010-06-09T12:04:57.292 + 2010-06-14T11:14:34.889 - + generated readonly permission /intakes/*/authorityrefs/ @@ -2900,9 +3404,9 @@ PERMIT 1 - 2010-06-09T12:04:57.292 + 2010-06-14T11:14:34.889 - + generated readonly permission loansin @@ -2913,9 +3417,9 @@ PERMIT 1 - 2010-06-09T12:04:57.293 + 2010-06-14T11:14:34.889 - + generated readonly permission /loansin/*/authorityrefs/ @@ -2928,9 +3432,9 @@ PERMIT 1 - 2010-06-09T12:04:57.293 + 2010-06-14T11:14:34.890 - + generated readonly permission loansout @@ -2941,9 +3445,9 @@ PERMIT 1 - 2010-06-09T12:04:57.294 + 2010-06-14T11:14:34.890 - + generated readonly permission /loansout/*/authorityrefs/ @@ -2956,9 +3460,9 @@ PERMIT 1 - 2010-06-09T12:04:57.294 + 2010-06-14T11:14:34.890 - + generated readonly permission movements @@ -2969,9 +3473,9 @@ PERMIT 1 - 2010-06-09T12:04:57.294 + 2010-06-14T11:14:34.890 - + generated readonly permission /movements/*/authorityrefs/ @@ -2984,9 +3488,9 @@ PERMIT 1 - 2010-06-09T12:04:57.295 + 2010-06-14T11:14:34.890 - + generated readonly permission vocabularies @@ -2997,9 +3501,9 @@ PERMIT 1 - 2010-06-09T12:04:57.295 + 2010-06-14T11:14:34.891 - + generated readonly permission vocabularyitems @@ -3010,9 +3514,9 @@ PERMIT 1 - 2010-06-09T12:04:57.295 + 2010-06-14T11:14:34.891 - + generated readonly permission /vocabularies/*/items/ @@ -3025,9 +3529,9 @@ PERMIT 1 - 2010-06-09T12:04:57.295 + 2010-06-14T11:14:34.891 - + generated readonly permission orgauthorities @@ -3038,9 +3542,9 @@ PERMIT 1 - 2010-06-09T12:04:57.296 + 2010-06-14T11:14:34.891 - + generated readonly permission /orgauthorities/*/items/*/authorityrefs/ @@ -3053,9 +3557,9 @@ PERMIT 1 - 2010-06-09T12:04:57.296 + 2010-06-14T11:14:34.891 - + generated readonly permission organizations @@ -3066,9 +3570,9 @@ PERMIT 1 - 2010-06-09T12:04:57.296 + 2010-06-14T11:14:34.892 - + generated readonly permission /orgauthorities/*/items/ @@ -3081,9 +3585,9 @@ PERMIT 1 - 2010-06-09T12:04:57.297 + 2010-06-14T11:14:34.892 - + generated readonly permission /orgauthorities/*/items/*/refobjs @@ -3096,9 +3600,9 @@ PERMIT 1 - 2010-06-09T12:04:57.298 + 2010-06-14T11:14:34.892 - + generated readonly permission personauthorities @@ -3109,9 +3613,9 @@ PERMIT 1 - 2010-06-09T12:04:57.298 + 2010-06-14T11:14:34.892 - + generated readonly permission /personauthorities/*/items/ @@ -3124,9 +3628,9 @@ PERMIT 1 - 2010-06-09T12:04:57.298 + 2010-06-14T11:14:34.893 - + generated readonly permission /personauthorities/*/items/*/refobjs @@ -3139,9 +3643,9 @@ PERMIT 1 - 2010-06-09T12:04:57.298 + 2010-06-14T11:14:34.893 - + generated readonly permission persons @@ -3152,9 +3656,9 @@ PERMIT 1 - 2010-06-09T12:04:57.298 + 2010-06-14T11:14:34.893 - + generated readonly permission /personauthorities/*/items/ @@ -3167,9 +3671,9 @@ PERMIT 1 - 2010-06-09T12:04:57.299 + 2010-06-14T11:14:34.893 - + generated readonly permission locationauthorities @@ -3180,9 +3684,9 @@ PERMIT 1 - 2010-06-09T12:04:57.299 + 2010-06-14T11:14:34.894 - + generated readonly permission /locationauthorities/*/items/ @@ -3195,9 +3699,9 @@ PERMIT 1 - 2010-06-09T12:04:57.299 + 2010-06-14T11:14:34.894 - + generated readonly permission locations @@ -3208,9 +3712,9 @@ PERMIT 1 - 2010-06-09T12:04:57.300 + 2010-06-14T11:14:34.894 - + generated readonly permission acquisitions @@ -3221,9 +3725,9 @@ PERMIT 1 - 2010-06-09T12:04:57.300 + 2010-06-14T11:14:34.894 - + generated readonly permission /acquisitions/*/authorityrefs/ @@ -3236,9 +3740,9 @@ PERMIT 1 - 2010-06-09T12:04:57.300 + 2010-06-14T11:14:34.894 - + generated readonly permission relations @@ -3249,12 +3753,132 @@ PERMIT 1 - 2010-06-09T12:04:57.300 + 2010-06-14T11:14:34.895 + + + generated readonly permission + + /relations/object/* + + + READ + + + SEARCH + + PERMIT + 1 + 2010-06-14T11:14:34.895 + + + generated readonly permission + + /relations/object/*/type/* + + + READ + + + SEARCH + + PERMIT + 1 + 2010-06-14T11:14:34.895 + + + generated readonly permission + + /relations/subject/* + + + READ + + + SEARCH + + PERMIT + 1 + 2010-06-14T11:14:34.895 + + + generated readonly permission + + /relations/subject/*/type/* + + + READ + + + SEARCH + + PERMIT + 1 + 2010-06-14T11:14:34.895 + + + generated readonly permission + + /relations/subject/*/type/*/object/* + + + READ + + + SEARCH + + PERMIT + 1 + 2010-06-14T11:14:34.895 + + + generated readonly permission + + /relations/type/* + + + READ + + + SEARCH + + PERMIT + 1 + 2010-06-14T11:14:34.896 + + + generated readonly permission + + /relations/type/*/object/* + + + READ + + + SEARCH + + PERMIT + 1 + 2010-06-14T11:14:34.896 + + + generated readonly permission + + /relations/type/*/subject/* + + + READ + + + SEARCH + + PERMIT + 1 + 2010-06-14T11:14:34.896 - + generated readonly permission - relations/subject/*/type/*/object/* + /relations/type/*/subject/*/object/* READ @@ -3264,9 +3888,9 @@ PERMIT 1 - 2010-06-09T12:04:57.301 + 2010-06-14T11:14:34.896 - + generated readonly permission accounts @@ -3277,9 +3901,9 @@ PERMIT 1 - 2010-06-09T12:04:57.301 + 2010-06-14T11:14:34.896 - + generated readonly permission dimensions @@ -3290,9 +3914,9 @@ PERMIT 1 - 2010-06-09T12:04:57.301 + 2010-06-14T11:14:34.897 - + generated readonly permission contacts @@ -3303,9 +3927,9 @@ PERMIT 1 - 2010-06-09T12:04:57.301 + 2010-06-14T11:14:34.897 - + generated readonly permission /personauthorities/*/items/*/contacts @@ -3318,9 +3942,9 @@ PERMIT 1 - 2010-06-09T12:04:57.302 + 2010-06-14T11:14:34.897 - + generated readonly permission /orgauthorities/*/items/*/contacts @@ -3333,9 +3957,9 @@ PERMIT 1 - 2010-06-09T12:04:57.302 + 2010-06-14T11:14:34.897 - + generated readonly permission notes @@ -3346,9 +3970,9 @@ PERMIT 1 - 2010-06-09T12:04:57.302 + 2010-06-14T11:14:34.897 - + generated readonly permission authorization/roles @@ -3359,9 +3983,9 @@ PERMIT 1 - 2010-06-09T12:04:57.302 + 2010-06-14T11:14:34.898 - + generated readonly permission authorization/permissions @@ -3372,9 +3996,9 @@ PERMIT 1 - 2010-06-09T12:04:57.303 + 2010-06-14T11:14:34.898 - + generated readonly permission authorization/permissions/permroles @@ -3385,9 +4009,9 @@ PERMIT 1 - 2010-06-09T12:04:57.303 + 2010-06-14T11:14:34.898 - + generated readonly permission /authorization/permissions/*/permroles/ @@ -3400,9 +4024,9 @@ PERMIT 1 - 2010-06-09T12:04:57.303 + 2010-06-14T11:14:34.898 - + generated readonly permission accounts/accountroles @@ -3413,9 +4037,9 @@ PERMIT 1 - 2010-06-09T12:04:57.303 + 2010-06-14T11:14:34.898 - + generated readonly permission /accounts/*/accountroles/ @@ -3428,9 +4052,9 @@ PERMIT 1 - 2010-06-09T12:04:57.304 + 2010-06-14T11:14:34.899 - + generated readonly permission authorization/roles/permroles @@ -3441,9 +4065,9 @@ PERMIT 1 - 2010-06-09T12:04:57.304 + 2010-06-14T11:14:34.899 - + generated readonly permission /authorization/roles/*/permroles/ @@ -3456,6 +4080,6 @@ PERMIT 1 - 2010-06-09T12:04:57.304 + 2010-06-14T11:14:34.899 diff --git a/services/authorization-mgt/import/src/main/resources/import-data/import-roles.xml b/services/authorization-mgt/import/src/main/resources/import-data/import-roles.xml index ed022718e..1e493600a 100644 --- a/services/authorization-mgt/import/src/main/resources/import-data/import-roles.xml +++ b/services/authorization-mgt/import/src/main/resources/import-data/import-roles.xml @@ -1,27 +1,27 @@ - + ROLE_TENANT_ADMINISTRATOR generated tenant admin role 2 - 2010-06-09T12:04:57.219 + 2010-06-14T11:14:34.801 - + ROLE_TENANT_ADMINISTRATOR generated tenant admin role 1 - 2010-06-09T12:04:57.225 + 2010-06-14T11:14:34.843 - + ROLE_TENANT_READER generated tenant read only role 2 - 2010-06-09T12:04:57.224 + 2010-06-14T11:14:34.842 - + ROLE_TENANT_READER generated tenant read only role 1 - 2010-06-09T12:04:57.225 + 2010-06-14T11:14:34.843 diff --git a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionResource.java b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionResource.java index 1cdaedbb5..08457e975 100644 --- a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionResource.java +++ b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionResource.java @@ -31,6 +31,7 @@ import javax.ws.rs.DELETE; import javax.ws.rs.POST; import javax.ws.rs.PUT; import javax.ws.rs.PathParam; +import javax.ws.rs.QueryParam; import javax.ws.rs.WebApplicationException; import javax.ws.rs.core.Context; import javax.ws.rs.core.MultivaluedMap; @@ -387,8 +388,14 @@ public class PermissionResource @POST @Path("{csid}/permroles") - public Response createPermissionRole(@PathParam("csid") String permCsid, + public Response createPermissionRole(@QueryParam("_method") String method, + @PathParam("csid") String permCsid, PermissionRole input) { + if (method != null) { + if ("delete".equalsIgnoreCase(method)) { + return deletePermissionRole(permCsid, input); + } + } if (logger.isDebugEnabled()) { logger.debug("createPermissionRole with permCsid=" + permCsid); } @@ -487,11 +494,9 @@ public class PermissionResource return result; } - @DELETE - @Path("{csid}/permroles/{permrolecsid}") public Response deletePermissionRole( @PathParam("csid") String permCsid, - @PathParam("permrolecsid") String permrolecsid) { + PermissionRole input) { if (logger.isDebugEnabled()) { logger.debug("deletePermissionRole with permCsid=" + permCsid); } @@ -507,7 +512,7 @@ public class PermissionResource PermissionRoleSubResource subResource = new PermissionRoleSubResource(PermissionRoleSubResource.PERMISSION_PERMROLE_SERVICE); //delete all relationships for a permission - subResource.deletePermissionRole(permCsid, SubjectType.ROLE); + subResource.deletePermissionRole(permCsid, SubjectType.ROLE, input); return Response.status(HttpResponseCodes.SC_OK).build(); } catch (UnauthorizedException ue) { Response response = Response.status( diff --git a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionRoleSubResource.java b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionRoleSubResource.java index b56f81a97..a6195c8f0 100644 --- a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionRoleSubResource.java +++ b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/PermissionRoleSubResource.java @@ -190,4 +190,24 @@ public class PermissionRoleSubResource ServiceContext ctx = createServiceContext((PermissionRole) null, subject); getStorageClient(ctx).delete(ctx, csid); } + + /** + * deletePermissionRole deletes permission-role relationships using given + * csid of object (permission/role) and subject (role/permission) + * @param csid + * @param subject + * @param input with role and permissions to delete + * @return + * @throws Exception + */ + public void deletePermissionRole(String csid, + SubjectType subject, PermissionRole input) throws Exception { + + if (logger.isDebugEnabled()) { + logger.debug("deletePermissionRole(input) with csid=" + csid); + } + ServiceContext ctx = createServiceContext(input, subject); + DocumentHandler handler = createDocumentHandler(ctx); + getStorageClient(ctx).delete(ctx, csid, handler); + } } diff --git a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/RoleResource.java b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/RoleResource.java index 49f27fe49..03e0767d8 100644 --- a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/RoleResource.java +++ b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/RoleResource.java @@ -31,6 +31,7 @@ import javax.ws.rs.DELETE; import javax.ws.rs.POST; import javax.ws.rs.PUT; import javax.ws.rs.PathParam; +import javax.ws.rs.QueryParam; import javax.ws.rs.WebApplicationException; import javax.ws.rs.core.Context; import javax.ws.rs.core.MultivaluedMap; @@ -377,8 +378,13 @@ public class RoleResource @POST @Path("{csid}/permroles") - public Response createRolePermission(@PathParam("csid") String roleCsid, + public Response createRolePermission(@QueryParam("_method") String method, @PathParam("csid") String roleCsid, PermissionRole input) { + if (method != null) { + if ("delete".equalsIgnoreCase(method)) { + return deleteRolePermission(roleCsid, input); + } + } if (logger.isDebugEnabled()) { logger.debug("createRolePermission with roleCsid=" + roleCsid); } @@ -477,14 +483,14 @@ public class RoleResource return result; } - @DELETE - @Path("{csid}/permroles/{permrolecsid}") public Response deleteRolePermission( @PathParam("csid") String roleCsid, - @PathParam("permrolecsid") String permrolecsid) { + PermissionRole input) { + if (logger.isDebugEnabled()) { logger.debug("deleteRolePermission with roleCsid=" + roleCsid); } + if (roleCsid == null || "".equals(roleCsid)) { logger.error("deleteRolePermission: missing roleCsid!"); Response response = Response.status(Response.Status.BAD_REQUEST).entity( @@ -497,7 +503,7 @@ public class RoleResource PermissionRoleSubResource subResource = new PermissionRoleSubResource(PermissionRoleSubResource.ROLE_PERMROLE_SERVICE); //delete all relationships for a permission - subResource.deletePermissionRole(roleCsid, SubjectType.PERMISSION); + subResource.deletePermissionRole(roleCsid, SubjectType.PERMISSION, input); return Response.status(HttpResponseCodes.SC_OK).build(); } catch (UnauthorizedException ue) { Response response = Response.status( diff --git a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java index 0b02e44db..3d7d1ad3a 100644 --- a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java +++ b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/AuthorizationDelegate.java @@ -113,19 +113,44 @@ public class AuthorizationDelegate { */ static void deletePermissions(ServiceContext ctx, PermissionRole pr) throws Exception { - PermissionValue pv = pr.getPermissions().get(0); - deletePermissions(pv); - } - - /** - * deletePermissions delete permissions associated with given PermissionValue - * @param pv permission value - * @throws Exception - * @see PermissionValue - */ - static void deletePermissions(PermissionValue pv) - throws Exception { - deletePermissions(pv.getPermissionId()); + SubjectType subject = PermissionRoleUtil.getRelationSubject(ctx, pr); + AuthZ authz = AuthZ.get(); + if (subject.equals(SubjectType.ROLE)) { + PermissionValue pv = pr.getPermissions().get(0); + Permission p = getPermission(pv.getPermissionId()); + if (p == null) { + String msg = "deletePermissions: No permission found for id=" + pv.getPermissionId(); + logger.error(msg); + throw new DocumentNotFoundException(msg); + } + CSpaceResource[] resources = getResources(p); + String[] roles = getRoles(pr.getRoles()); + for (CSpaceResource res : resources) { + authz.deletePermissions(res, roles); + } + } else if (SubjectType.PERMISSION.equals(subject)) { + RoleValue rv = pr.getRoles().get(0); + Role r = getRole(rv.getRoleId()); + if (r == null) { + String msg = "deletePermissions: No role found for id=" + rv.getRoleId(); + logger.error(msg); + throw new DocumentNotFoundException(msg); + } + String[] roles = {rv.getRoleName()}; + for (PermissionValue pv : pr.getPermissions()) { + Permission p = getPermission(pv.getPermissionId()); + if (p == null) { + String msg = "deletePermissions: No permission found for id=" + pv.getPermissionId(); + logger.error(msg); + //TODO: would be nice contiue to still send 400 back + continue; + } + CSpaceResource[] resources = getResources(p); + for (CSpaceResource res : resources) { + authz.deletePermissions(res, roles); + } + } + } } /** diff --git a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleDocumentHandler.java b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleDocumentHandler.java index c863d5449..9c8b1c86d 100644 --- a/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleDocumentHandler.java +++ b/services/authorization-mgt/service/src/main/java/org/collectionspace/services/authorization/storage/PermissionRoleDocumentHandler.java @@ -82,9 +82,15 @@ public class PermissionRoleDocumentHandler throw new UnsupportedOperationException("operation not relevant for PermissionRoleDocumentHandler"); } + @Override + public void handleDelete(DocumentWrapper> wrapDoc) throws Exception { + fillCommonPart(getCommonPart(), wrapDoc); + } + @Override public void completeDelete(DocumentWrapper> wrapDoc) throws Exception { -// + PermissionRole pr = getCommonPart(); + AuthorizationDelegate.deletePermissions(getServiceContext(), pr); } @Override diff --git a/services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java b/services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java index fcfa499de..cd54396ac 100644 --- a/services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java +++ b/services/common/src/main/java/org/collectionspace/services/common/security/SecurityInterceptor.java @@ -73,10 +73,6 @@ public class SecurityInterceptor implements PreProcessInterceptor { checkActive(); AuthZ authZ = AuthZ.get(); CSpaceResource res = new URIResourceImpl(resName, httpMethod); - /* - TEMPORARILY commented out by Aron per Sanjay's suggestion in CSPACE-1946. - NOTE: This effectively DISABLES authorization checks at the services layer. - */ if (!authZ.isAccessAllowed(res)) { logger.error("Access to " + res.getId() + " is NOT allowed to " + " user=" + AuthN.get().getUserId()); diff --git a/services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaRelationshipStorageClient.java b/services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaRelationshipStorageClient.java index 8787ab6b1..ed5a8b68b 100644 --- a/services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaRelationshipStorageClient.java +++ b/services/common/src/main/java/org/collectionspace/services/common/storage/jpa/JpaRelationshipStorageClient.java @@ -295,6 +295,67 @@ public class JpaRelationshipStorageClient extends JpaStorageClientImpl { } } + /** + * delete of a relationship deletes one or more relationships between + * permission and role + * the object and subjects of the relationship is chosen (by doc handler) from + * the payload + * @param ctx + * @param handler + * @return + * @throws DocumentNotFoundException + * @throws DocumentException + */ + @Override + public void delete(ServiceContext ctx, String id, DocumentHandler handler) + throws DocumentNotFoundException, DocumentException { + + if (ctx == null) { + throw new IllegalArgumentException( + "delete : ctx is missing"); + } + if (handler == null) { + throw new IllegalArgumentException( + "delete : handler is missing"); + } + EntityManagerFactory emf = null; + EntityManager em = null; + try { + handler.prepare(Action.DELETE); + List rl = new ArrayList(); + DocumentWrapper> wrapDoc = + new DocumentWrapperImpl>(rl); + handler.handle(Action.DELETE, wrapDoc); + emf = JpaStorageUtils.getEntityManagerFactory(); + em = emf.createEntityManager(); + em.getTransaction().begin(); + //the following could be much more efficient if done with a single + //sql/jql + for (T r : rl) { + em.remove(r); + } + em.getTransaction().commit(); + handler.complete(Action.DELETE, wrapDoc); + } catch (DocumentException de) { + if (em != null && em.getTransaction().isActive()) { + em.getTransaction().rollback(); + } + throw de; + } catch (Exception e) { + if (logger.isDebugEnabled()) { + logger.debug("delete(ctx, ix, handler): Caught exception ", e); + } + if (em != null && em.getTransaction().isActive()) { + em.getTransaction().rollback(); + } + throw new DocumentException(e); + } finally { + if (emf != null) { + JpaStorageUtils.releaseEntityManagerFactory(emf); + } + } + } + /** * getObjectId returns the id of the object in a relationship * @param ctx diff --git a/services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthorizationServiceTest.java b/services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthorizationServiceTest.java index da602745c..7530cc8a9 100644 --- a/services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthorizationServiceTest.java +++ b/services/security/client/src/test/java/org/collectionspace/services/security/client/test/AuthorizationServiceTest.java @@ -90,7 +90,6 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl { private final String CLASS_NAME = AuthorizationServiceTest.class.getName(); private final Logger logger = LoggerFactory.getLogger(CLASS_NAME); - // Instance variables specific to this test. private String knownResourceId = null; private List allResourceIdsCreated = new ArrayList(); @@ -371,7 +370,7 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl { @Test(dataProvider = "testName", dataProviderClass = AbstractServiceTestImpl.class, dependsOnMethods = {"read", "readList", "readNonExistent"}) public void updateNotAllowed(String testName) throws Exception { - + if (logger.isDebugEnabled()) { logger.debug(testBanner(testName, CLASS_NAME)); } @@ -431,7 +430,7 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl { @Test(dataProvider = "testName", dataProviderClass = AbstractServiceTestImpl.class, dependsOnMethods = {"updateNotAllowed"}) public void deleteNotAllowed(String testName) throws Exception { - + if (logger.isDebugEnabled()) { logger.debug(testBanner(testName, CLASS_NAME)); } @@ -460,7 +459,7 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl { @Test(dataProvider = "testName", dataProviderClass = AbstractServiceTestImpl.class, dependsOnMethods = {"deleteNotAllowed"}) public void delete(String testName) throws Exception { - + if (logger.isDebugEnabled()) { logger.debug(testBanner(testName, CLASS_NAME)); } @@ -520,9 +519,7 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl { logger.debug("Cleaning up temporary resources created for testing ..."); } - //FIXME delete on permission role deletes all roles associated with the permission - //this would delete association with ROLE_ADMINISTRATION too - //deletePermissionRoles(); + deletePermissionRoles(); deleteAccountRoles(); //FIXME delete on permission role deletes all roles associated with the permission //this would delete association with ROLE_ADMINISTRATION too @@ -684,7 +681,7 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl { private String createPermissionRole(PermissionValue pv, Collection rvs) { setupCreate(); - List rvls = new ArrayList(); + List rvls = new ArrayList(); rvls.addAll(rvs); PermissionRole permRole = PermissionRoleFactory.createPermissionRoleInstance( pv, rvls, true, true); @@ -702,14 +699,19 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl { return extractId(res); } - private void deletePermissionRole(String permId) { + private void deletePermissionRole(PermissionValue pv, + Collection rvs) { + List rvls = new ArrayList(); + rvls.addAll(rvs); // Perform setup. setupDelete(); // Submit the request to the service and store the response. PermissionRoleClient client = new PermissionRoleClient(); - ClientResponse res = client.delete(permId, "123"); + PermissionRole permRole = PermissionRoleFactory.createPermissionRoleInstance( + pv, rvls, true, true); + ClientResponse res = client.delete(pv.getPermissionId(), permRole); int statusCode = res.getStatus(); // Check the status code of the response: does it match @@ -725,10 +727,14 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl { private void deletePermissionRoles() { - //first delete relationships between the entities - for (PermissionValue pv : permValues.values()) { - deletePermissionRole(pv.getPermissionId()); - } + List bigbirdRoleValues = new ArrayList(); + bigbirdRoleValues.add(roleValues.get("ROLE_TEST_CM")); + deletePermissionRole(permValues.get(bigbirdPermId), bigbirdRoleValues); + + List elmoRoleValues = new ArrayList(); + elmoRoleValues.add(roleValues.get("ROLE_TEST_INTERN")); + deletePermissionRole(permValues.get(elmoPermId), elmoRoleValues); + } private void deleteAccountRoles() { @@ -757,7 +763,6 @@ public class AuthorizationServiceTest extends AbstractServiceTestImpl { } } - private String getTenantId(AccountClient client) { return client.getProperty(AccountClient.TENANT_PROPERTY); } diff --git a/services/security/client/src/test/java/org/collectionspace/services/security/client/test/MultiTenancyTest.java b/services/security/client/src/test/java/org/collectionspace/services/security/client/test/MultiTenancyTest.java index 75075ecbf..966bed548 100644 --- a/services/security/client/src/test/java/org/collectionspace/services/security/client/test/MultiTenancyTest.java +++ b/services/security/client/src/test/java/org/collectionspace/services/security/client/test/MultiTenancyTest.java @@ -520,8 +520,6 @@ public class MultiTenancyTest extends AbstractServiceTestImpl { // CRUD tests : DELETE tests // --------------------------------------------------------------- // Success outcomes - - @Override @Test(dataProvider = "testName", dataProviderClass = AbstractServiceTestImpl.class, dependsOnMethods = {"deleteNonExistent"}) @@ -632,9 +630,7 @@ public class MultiTenancyTest extends AbstractServiceTestImpl { //tenant admin users are used to create accounts, roles and permissions and relationships //assumption : two tenant admin users exist before running this test - //FIXME delete on permission role deletes all roles associated with the permission - //this would delete association with ROLE_ADMINISTRATION too - //deletePermissionRoles(); + deletePermissionRoles(); deleteAccountRoles(); //FIXME delete on permission role deletes all roles associated with the permission //this would delete association with ROLE_ADMINISTRATION too @@ -646,9 +642,12 @@ public class MultiTenancyTest extends AbstractServiceTestImpl { private void deletePermissionRoles() { //first delete relationships between the entities + for (String tenantId : tenantPermissions.keySet()) { + List tenantRoleValues = new ArrayList(); + tenantRoleValues.add(tenantRoles.get(tenantId)); PermissionValue pv = tenantPermissions.get(tenantId); - deletePermissionRole(tenantId, pv.getPermissionId()); + deletePermissionRole(tenantId, pv, tenantRoleValues); } } @@ -866,7 +865,7 @@ public class MultiTenancyTest extends AbstractServiceTestImpl { return extractId(res); } - private void deletePermissionRole(String tenantId, String permId) { + private void deletePermissionRole(String tenantId, PermissionValue pv, List rvls) { // Perform setup. setupDelete(); @@ -875,7 +874,9 @@ public class MultiTenancyTest extends AbstractServiceTestImpl { PermissionRoleClient client = new PermissionRoleClient(); UserInfo ui = tenantAdminUsers.get(tenantId); client.setAuth(true, ui.userName, true, ui.password, true); - ClientResponse res = client.delete(permId, "123"); + PermissionRole permRole = PermissionRoleFactory.createPermissionRoleInstance( + pv, rvls, true, true); + ClientResponse res = client.delete(pv.getPermissionId(), permRole); int statusCode = res.getStatus(); // Check the status code of the response: does it match -- 2.47.3