// True means that the permission is being granted by this rule, false means the
// True means that the permission is being granted by this rule, false means
// permission is being DENIED!
// the permission is being DENIED!
boolgrant=3;
boolgrant=3;
}
}
...
@@ -190,7 +190,6 @@ enum RoleCapabilities {
...
@@ -190,7 +190,6 @@ enum RoleCapabilities {
ROLE_CAPABILITIES_ASSIGN=3;
ROLE_CAPABILITIES_ASSIGN=3;
}
}
///////////////////////////////////////////
///////////////////////////////////////////
// USERS
// USERS
///////////////////////////////////////////
///////////////////////////////////////////
...
@@ -205,19 +204,23 @@ enum UserStatus {
...
@@ -205,19 +204,23 @@ enum UserStatus {
USER_STATUS_ACTIVE=2;
USER_STATUS_ACTIVE=2;
}
}
// PasswordSetting - it is handy to have this as a separate message b/c otherwise we could not distinguish between empty string and an unspecified password.
// PasswordSetting - it is handy to have this as a separate message b/c
// otherwise we could not distinguish between empty string and an unspecified
// password.
messagePasswordSetting{
messagePasswordSetting{
// The password
// The password
stringpassword=1;
stringpassword=1;
}
}
// EmailSetting - it is handy to have this as a separate message b/c otherwise we could not distinguish between empty string and an unspecified email.
// EmailSetting - it is handy to have this as a separate message b/c otherwise
// we could not distinguish between empty string and an unspecified email.
messageEmailSetting{
messageEmailSetting{
// The email adress
// The email adress
stringemail=1;
stringemail=1;
}
}
// EntitySetting - it is handy to have this as a separate message b/c otherwise we could not distinguish between empty string and an unspecified entity.
// EntitySetting - it is handy to have this as a separate message b/c otherwise
// we could not distinguish between empty string and an unspecified entity.
messageEntitySetting{
messageEntitySetting{
// The entity which represents this user (e.g. a Person or Device Record).
// The entity which represents this user (e.g. a Person or Device Record).
// What (given enough permissions) can be done with an EntityPermissionRule. E.g. globel entity permission rules, which are to be specified in a configuration file cannot be deleted, thus they are missing the ENTITY_PERMISSION_RULE_CAPABILITY_DELETE capability.
// What (given enough permissions) can be done with an EntityPermissionRule.
// E.g. globel entity permission rules, which are to be specified in a
// configuration file cannot be deleted, thus they are missing the