github.com/pf-qiu/concourse/v6@v6.7.3-0.20201207032516-1f455d73275f/atc/api/accessor/roles.go (about)

     1  package accessor
     2  
     3  import (
     4  	"github.com/pf-qiu/concourse/v6/atc"
     5  )
     6  
     7  const (
     8  	MemberRole   = "member"
     9  	OwnerRole    = "owner"
    10  	OperatorRole = "pipeline-operator"
    11  	ViewerRole   = "viewer"
    12  )
    13  
    14  var DefaultRoles = map[string]string{
    15  	atc.SaveConfig:                    MemberRole,
    16  	atc.GetConfig:                     ViewerRole,
    17  	atc.GetCC:                         ViewerRole,
    18  	atc.GetBuild:                      ViewerRole,
    19  	atc.GetBuildPlan:                  ViewerRole,
    20  	atc.CreateBuild:                   MemberRole,
    21  	atc.ListBuilds:                    ViewerRole,
    22  	atc.BuildEvents:                   ViewerRole,
    23  	atc.BuildResources:                ViewerRole,
    24  	atc.AbortBuild:                    OperatorRole,
    25  	atc.GetBuildPreparation:           ViewerRole,
    26  	atc.GetJob:                        ViewerRole,
    27  	atc.CreateJobBuild:                OperatorRole,
    28  	atc.RerunJobBuild:                 OperatorRole,
    29  	atc.ListAllJobs:                   ViewerRole,
    30  	atc.ListJobs:                      ViewerRole,
    31  	atc.ListJobBuilds:                 ViewerRole,
    32  	atc.ListJobInputs:                 ViewerRole,
    33  	atc.GetJobBuild:                   ViewerRole,
    34  	atc.PauseJob:                      OperatorRole,
    35  	atc.UnpauseJob:                    OperatorRole,
    36  	atc.ScheduleJob:                   OperatorRole,
    37  	atc.GetVersionsDB:                 ViewerRole,
    38  	atc.JobBadge:                      ViewerRole,
    39  	atc.MainJobBadge:                  ViewerRole,
    40  	atc.ClearTaskCache:                OperatorRole,
    41  	atc.ListAllResources:              ViewerRole,
    42  	atc.ListResources:                 ViewerRole,
    43  	atc.ListResourceTypes:             ViewerRole,
    44  	atc.GetResource:                   ViewerRole,
    45  	atc.UnpinResource:                 OperatorRole,
    46  	atc.SetPinCommentOnResource:       OperatorRole,
    47  	atc.CheckResource:                 OperatorRole,
    48  	atc.CheckResourceWebHook:          OperatorRole,
    49  	atc.CheckResourceType:             OperatorRole,
    50  	atc.ListResourceVersions:          ViewerRole,
    51  	atc.GetResourceVersion:            ViewerRole,
    52  	atc.EnableResourceVersion:         OperatorRole,
    53  	atc.DisableResourceVersion:        OperatorRole,
    54  	atc.PinResourceVersion:            OperatorRole,
    55  	atc.ListBuildsWithVersionAsInput:  ViewerRole,
    56  	atc.ListBuildsWithVersionAsOutput: ViewerRole,
    57  	atc.GetResourceCausality:          ViewerRole,
    58  	atc.ListAllPipelines:              ViewerRole,
    59  	atc.ListPipelines:                 ViewerRole,
    60  	atc.GetPipeline:                   ViewerRole,
    61  	atc.DeletePipeline:                MemberRole,
    62  	atc.OrderPipelines:                MemberRole,
    63  	atc.PausePipeline:                 OperatorRole,
    64  	atc.ArchivePipeline:               OwnerRole,
    65  	atc.UnpausePipeline:               OperatorRole,
    66  	atc.ExposePipeline:                MemberRole,
    67  	atc.HidePipeline:                  MemberRole,
    68  	atc.RenamePipeline:                MemberRole,
    69  	atc.ListPipelineBuilds:            ViewerRole,
    70  	atc.CreatePipelineBuild:           MemberRole,
    71  	atc.PipelineBadge:                 ViewerRole,
    72  	atc.RegisterWorker:                MemberRole,
    73  	atc.LandWorker:                    MemberRole,
    74  	atc.RetireWorker:                  MemberRole,
    75  	atc.PruneWorker:                   MemberRole,
    76  	atc.HeartbeatWorker:               MemberRole,
    77  	atc.ListWorkers:                   ViewerRole,
    78  	atc.DeleteWorker:                  MemberRole,
    79  	atc.SetLogLevel:                   MemberRole,
    80  	atc.GetLogLevel:                   ViewerRole,
    81  	atc.DownloadCLI:                   ViewerRole,
    82  	atc.GetInfo:                       ViewerRole,
    83  	atc.GetInfoCreds:                  ViewerRole,
    84  	atc.ListContainers:                ViewerRole,
    85  	atc.GetContainer:                  ViewerRole,
    86  	atc.HijackContainer:               MemberRole,
    87  	atc.ListDestroyingContainers:      ViewerRole,
    88  	atc.ReportWorkerContainers:        MemberRole,
    89  	atc.ListVolumes:                   ViewerRole,
    90  	atc.ListDestroyingVolumes:         ViewerRole,
    91  	atc.ReportWorkerVolumes:           MemberRole,
    92  	atc.ListTeams:                     ViewerRole,
    93  	atc.GetTeam:                       ViewerRole,
    94  	atc.SetTeam:                       OwnerRole,
    95  	atc.RenameTeam:                    OwnerRole,
    96  	atc.DestroyTeam:                   OwnerRole,
    97  	atc.ListTeamBuilds:                ViewerRole,
    98  	atc.CreateArtifact:                MemberRole,
    99  	atc.GetArtifact:                   MemberRole,
   100  	atc.ListBuildArtifacts:            ViewerRole,
   101  	atc.GetWall:                       ViewerRole,
   102  }