partner-reference-application/xs-security.json at main-multi-tenant-features · SAP-samples/partner-reference-application · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
{
  "scopes": [
    {
      "name": "$XSAPPNAME.PoetrySlamFull",
      "description": "Full Read/Write Access to Poetry Slams"
    },
    {
      "name": "$XSAPPNAME.PoetrySlamRestricted",
      "description": "Restricted Read/Write Access to Poetry Slams"
    },
    {
      "name": "$XSAPPNAME.PoetrySlamReadonly",
      "description": "Read-only Access to Poetry Slams"
    },
    {
      "name": "$XSAPPNAME.mtcallback",
      "description": "Subscription via SaaS Registry",
      "grant-as-authority-to-apps": [
        "$XSAPPNAME(application,sap-provisioning,tenant-onboarding)"
      ]
    },
    {
      "name": "$XSAPPNAME.JobScheduler",
      "description": "SAP Job Scheduling Scope",
      "grant-as-authority-to-apps": [
        "$XSSERVICENAME(poetry-slams-jobscheduler)"
      ]
    },
    {
      "name": "$XSAPPNAME.cds.ExtensionDeveloper",
      "description": "Access to develop extensions for Poetry Slam Manager"
    }
  ],
  "attributes": [],
  "role-templates": [
    {
      "name": "PoetrySlamManagerRole",
      "description": "Full Access to Poetry Slams",
      "scope-references": [
        "$XSAPPNAME.PoetrySlamFull",
        "$XSAPPNAME.JobScheduler"
      ],
      "attribute-references": []
    },
    {
      "name": "PoetrySlamVisitorRole",
      "description": "Restricted Access to Poetry Slams for Visitors",
      "scope-references": ["$XSAPPNAME.PoetrySlamRestricted"],
      "attribute-references": []
    },
    {
      "name": "PoetrySlamExtensionDeveloperRole",
      "description": "Access to develop extensions for Poetry Slam Manager",
      "scope-references": ["$XSAPPNAME.cds.ExtensionDeveloper"],
      "attribute-references": []
    }
  ],
  "role-collections": [
    {
      "name": "PoetrySlamExtensionDeveloperRoleCollection",
      "description": "Poetry Slam Manager Extension Developer",
      "role-template-references": [
        "$XSAPPNAME.PoetrySlamExtensionDeveloperRole"
      ]
    },
    {
      "name": "PoetrySlamDocumentManagementRoleCollection",
      "description": "Manage attachments of Poetry Slams",
      "role-template-references": [
        "$XSSERVICENAME(poetry-slams-sdm-integration).SDM_User"
      ]
    }
  ],
  "oauth2-configuration": {
    "credential-types": ["binding-secret"]
  },
  "authorities": ["$XSAPPNAME.cds.ExtensionDeveloper"],
  "authorities-inheritance": false
}