Implement endpoint permission specs

Author: webprofusion-chrisc

src/Certify.Models/Hub/AccessControlConfig.cs

@@ -75,6 +75,9 @@ public class ResourceTypes
         public static string AcmeAccount { get; } = "acmeaccount";
         public static string ManagedChallenge { get; } = "managedchallenge";
         public static string ManagedInstance { get; } = "managedinstance";
+        public static string Target { get; } = "target";
+        public static string ChallengeProvider { get; } = "challengeprovider";
+        public static string DeploymentTask { get; } = "deploymenttask";
     }
 
     public static class StandardResourceActions
@@ -113,6 +116,7 @@ public static class StandardResourceActions
         public const string SecurityPrincipleList = "securityprinciple_list_action";
         public const string SecurityPrincipleAdd = "securityprinciple_add_action";
         public const string SecurityPrincipleUpdate = "securityprinciple_update_action";
+        public const string SecurityPrincipleUpdateAssignedRoles = "securityprinciple_update_assignedroles_action";
         public const string SecurityPrincipleDelete = "securityprinciple_delete_action";
         public const string SecurityPrinciplePasswordUpdate = "securityprinciple_password_update_action";
         public const string SecurityPrinciplePasswordValidate = "securityprinciple_password_validate_action";
@@ -122,18 +126,39 @@ public static class StandardResourceActions
         public const string ManagedChallengeUpdate = "managedchallenge_update_action";
         public const string ManagedChallengeDelete = "managedchallenge_update_action";
         public const string ManagedChallengeRequest = "managedchallenge_request_action";
+        public const string ManagedChallengeCleanup = "managedchallenge_cleanup_action";
 
         public const string ManagementHubInstancesList = "managementhub_instances_list_action";
         public const string ManagementHubInstanceJoin = "managementhub_instance_join_action";
         public const string ManagementHubInstanceDelete = "managementhub_instance_delete_action";
+        public const string ManagementHubInstanceAdd = "managementhub_instance_add_action";
+        public const string ManagementHubInstanceUpdate = "managementhub_instance_update_action";
 
         public const string AccessTokenList = "accesstoken_list_action";
         public const string AccessTokenAdd = "accesstoken_add_action";
         public const string AccessTokenUpdate = "accesstoken_update_action";
         public const string AccessTokenDelete = "accesstoken_delete_action";
 
         public const string SystemGeneralAction = "system_general_action";
+        public const string SystemExport = "system_export_action";
+        public const string SystemImport = "system_import_action";
+        public const string SystemStatusList = "system_status_list_action";
+        public const string SystemServiceConfigList = "system_serviceconfig_list_action";
+        public const string SystemCoreSettingsList = "system_coresettings_list_action";
+        public const string SystemServiceConfigUpdate = "system_serviceconfig_update_action";
+        public const string SystemCoreSettingsUpdate = "system_coresettings_update_action";
 
+        public const string TargetIPAddressesList = "target_ipaddresses_list_action";
+        public const string TargetTypesList = "target_types_list_action";
+        public const string TargetServiceItemsList = "target_serviceitems_list_action";
+        public const string TargetServiceItemIdentifiersList = "target_serviceitemidentifiers_list_action";
+
+        public const string ChallengeProviderList = "challengeprovider_list_action";
+        public const string ChallengeProviderDnsZonesList = "challengeprovider_dnszones_list_action";
+
+        public const string DeploymentTaskExecute = "deploymenttask_execute_action";
+
+        public const string CertificateDelete = "certificate_delete_action";
     }
 
     public class StandardPolicies
@@ -217,10 +242,30 @@ public static List<ResourceAction> GetStandardResourceActions()
                 new(StandardResourceActions.ManagedChallengeUpdate, "Update managed challenge", ResourceTypes.ManagedChallenge),
                 new(StandardResourceActions.ManagedChallengeDelete, "Delete managed challenge", ResourceTypes.ManagedChallenge),
                 new(StandardResourceActions.ManagedChallengeRequest, "Request to perform a managed challenge response", ResourceTypes.ManagedChallenge),
+                new(StandardResourceActions.ManagedChallengeCleanup, "Cleanup managed challenges", ResourceTypes.ManagedChallenge),
 
                 new(StandardResourceActions.ManagementHubInstancesList, "List managed instances", ResourceTypes.ManagedInstance),
                 new(StandardResourceActions.ManagementHubInstanceJoin, "Join management hub as a managed instance", ResourceTypes.ManagedInstance),
                 new(StandardResourceActions.ManagementHubInstanceDelete, "Delete managed instance from the hub", ResourceTypes.ManagedInstance),
+
+                new(StandardResourceActions.SystemExport, "Export system configuration", ResourceTypes.System),
+                new(StandardResourceActions.SystemImport, "Import system configuration", ResourceTypes.System),
+                new(StandardResourceActions.SystemStatusList, "List system status", ResourceTypes.System),
+                new(StandardResourceActions.SystemServiceConfigList, "List system service configuration", ResourceTypes.System),
+                new(StandardResourceActions.SystemCoreSettingsList, "List system core settings", ResourceTypes.System),
+                new(StandardResourceActions.SystemServiceConfigUpdate, "Update system service configuration", ResourceTypes.System),
+                new(StandardResourceActions.SystemCoreSettingsUpdate, "Update system core settings", ResourceTypes.System),
+
+                new(StandardResourceActions.TargetIPAddressesList, "List target IP addresses", ResourceTypes.Target),
+                new(StandardResourceActions.TargetTypesList, "List target types", ResourceTypes.Target),
+                new(StandardResourceActions.TargetServiceItemsList, "List target service items", ResourceTypes.Target),
+                new(StandardResourceActions.TargetServiceItemIdentifiersList, "List target service item identifiers", ResourceTypes.Target),
+
+                new(StandardResourceActions.ChallengeProviderList, "List challenge providers", ResourceTypes.ChallengeProvider),
+                new(StandardResourceActions.ChallengeProviderDnsZonesList, "List challenge provider DNS zones", ResourceTypes.ChallengeProvider),
+
+                new(StandardResourceActions.DeploymentTaskExecute, "Execute deployment task", ResourceTypes.DeploymentTask)
+
             };
         }