forked from hypersign-protocol/entity-ssi-api-service
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathaccess-matrix.ts
More file actions
138 lines (138 loc) · 6.2 KB
/
Copy pathaccess-matrix.ts
File metadata and controls
138 lines (138 loc) · 6.2 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
import { SERVICES } from '../supported-service/services/iServiceList';
export enum TokenModule {
DASHBOARD = 'DASHBOARD',
VERIFIER = 'VERIFIER',
APP_AUTH = 'APP_AUTH',
SUPER_ADMIN = 'SUPER_ADMIN',
ID_SERVICE = 'ID_SERVICE',
}
export const CAVACH_KYC_ACCESS_MATRIX = {
[TokenModule.DASHBOARD]: [
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_CREDIT,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_CREDIT,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_WEBHOOK_CONFIG,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_WEBHOOK_CONFIG,
SERVICES.CAVACH_API.ACCESS_TYPES.UPDATE_WEBHOOK_CONFIG,
SERVICES.CAVACH_API.ACCESS_TYPES.DELETE_WEBHOOK_CONFIG,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_USAGE,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_WIDGET_CONFIG,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_WIDGET_CONFIG,
SERVICES.CAVACH_API.ACCESS_TYPES.UPDATE_WIDGET_CONFIG,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_VERIFIED_USER,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_ANALYTICS,
],
[TokenModule.VERIFIER]: [
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_SESSION,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_USER_CONSENT,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_PASSIVE_LIVELINESS,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_DOC_OCR,
SERVICES.CAVACH_API.ACCESS_TYPES.CHECK_LIVE_STATUS,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_WIDGET_CONFIG,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_USER_CONSENT,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_AUTH,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_COMPANY,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_ZK_PROOF_VERIFY,
],
[TokenModule.APP_AUTH]: [
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_SESSION,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_USER_CONSENT,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_PASSIVE_LIVELINESS,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_DOC_OCR,
SERVICES.CAVACH_API.ACCESS_TYPES.CHECK_LIVE_STATUS,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_WIDGET_CONFIG,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_USER_CONSENT,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_ZK_PROOF_VERIFY,
],
[TokenModule.SUPER_ADMIN]: [SERVICES.SSI_API.ACCESS_TYPES.WRITE_CREDIT],
};
export const CAVACH_KYB_ACCESS_MATRIX = {
[TokenModule.DASHBOARD]: [
SERVICES.CAVACH_API.ACCESS_TYPES.READ_COMPANY,
SERVICES.CAVACH_API.ACCESS_TYPES.UPDATE_COMPANY,
SERVICES.CAVACH_API.ACCESS_TYPES.DELETE_COMPANY,
SERVICES.CAVACH_API.ACCESS_TYPES.UPDATE_COMPANY_STATUS,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_COMPANY_EXECUTIVES,
SERVICES.CAVACH_API.ACCESS_TYPES.UPDATE_COMPANY_EXECUTIVES,
SERVICES.CAVACH_API.ACCESS_TYPES.DELETE_COMPANY_EXECUTIVES,
SERVICES.CAVACH_API.ACCESS_TYPES.RESEND_COMPANY_EXECUTIVES_MAIL,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_DOCUMENT,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_WIDGET_CONFIG,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_WIDGET_CONFIG,
SERVICES.CAVACH_API.ACCESS_TYPES.UPDATE_WIDGET_CONFIG,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_COMPLIANCE,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_COMPLIANCE,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_CREDIT,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_CREDIT,
],
[TokenModule.VERIFIER]: [
SERVICES.CAVACH_API.ACCESS_TYPES.READ_COMPANY,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_COMPANY,
SERVICES.CAVACH_API.ACCESS_TYPES.UPDATE_COMPANY,
SERVICES.CAVACH_API.ACCESS_TYPES.DELETE_COMPANY,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_COMPANY_EXECUTIVES,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_COMPANY_EXECUTIVES,
SERVICES.CAVACH_API.ACCESS_TYPES.UPDATE_COMPANY_EXECUTIVES,
SERVICES.CAVACH_API.ACCESS_TYPES.DELETE_COMPANY_EXECUTIVES,
SERVICES.CAVACH_API.ACCESS_TYPES.RESEND_COMPANY_EXECUTIVES_MAIL,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_DOCUMENT,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_DOCUMENT,
SERVICES.CAVACH_API.ACCESS_TYPES.DELETE_DOCUMENT,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_WIDGET_CONFIG,
],
[TokenModule.APP_AUTH]: [
SERVICES.CAVACH_API.ACCESS_TYPES.READ_COMPANY,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_COMPANY,
SERVICES.CAVACH_API.ACCESS_TYPES.UPDATE_COMPANY,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_COMPANY_EXECUTIVES,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_COMPANY_EXECUTIVES,
SERVICES.CAVACH_API.ACCESS_TYPES.UPDATE_COMPANY_EXECUTIVES,
SERVICES.CAVACH_API.ACCESS_TYPES.DELETE_COMPANY_EXECUTIVES,
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_DOCUMENT,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_DOCUMENT,
SERVICES.CAVACH_API.ACCESS_TYPES.DELETE_DOCUMENT,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_COMPLIANCE,
],
[TokenModule.SUPER_ADMIN]: [
SERVICES.CAVACH_API.ACCESS_TYPES.WRITE_COMPLIANCE,
SERVICES.CAVACH_API.ACCESS_TYPES.UPDATE_COMPANY_STATUS,
SERVICES.CAVACH_API.ACCESS_TYPES.READ_COMPLIANCE,
SERVICES.CAVACH_API.ACCESS_TYPES.VERIFY_DOCUMENT,
],
};
export const SSI_ACCESS_MATRIX = {
[TokenModule.DASHBOARD]: [
SERVICES.SSI_API.ACCESS_TYPES.READ_DID,
SERVICES.SSI_API.ACCESS_TYPES.WRITE_DID,
SERVICES.SSI_API.ACCESS_TYPES.WRITE_CREDIT,
SERVICES.SSI_API.ACCESS_TYPES.READ_CREDIT,
SERVICES.SSI_API.ACCESS_TYPES.WRITE_SCHEMA,
SERVICES.SSI_API.ACCESS_TYPES.READ_SCHEMA,
SERVICES.SSI_API.ACCESS_TYPES.CHECK_LIVE_STATUS,
SERVICES.SSI_API.ACCESS_TYPES.READ_TX,
SERVICES.SSI_API.ACCESS_TYPES.READ_CREDENTIAL,
SERVICES.SSI_API.ACCESS_TYPES.VERIFY_CREDENTIAL,
SERVICES.SSI_API.ACCESS_TYPES.WRITE_CREDENTIAL,
SERVICES.SSI_API.ACCESS_TYPES.READ_USAGE,
SERVICES.SSI_API.ACCESS_TYPES.WRITE_PRESENTATION,
SERVICES.SSI_API.ACCESS_TYPES.VERIFY_PRESENTATION,
],
[TokenModule.VERIFIER]: [SERVICES.SSI_API.ACCESS_TYPES.READ_DID],
[TokenModule.APP_AUTH]: [
SERVICES.SSI_API.ACCESS_TYPES.READ_DID,
SERVICES.SSI_API.ACCESS_TYPES.WRITE_DID,
SERVICES.SSI_API.ACCESS_TYPES.WRITE_CREDENTIAL,
SERVICES.SSI_API.ACCESS_TYPES.READ_CREDENTIAL,
SERVICES.SSI_API.ACCESS_TYPES.ISSUE_DID_JWT,
],
[TokenModule.ID_SERVICE]: [
SERVICES.SSI_API.ACCESS_TYPES.READ_TX,
SERVICES.SSI_API.ACCESS_TYPES.WRITE_CREDENTIAL,
SERVICES.SSI_API.ACCESS_TYPES.VERIFY_PRESENTATION,
],
[TokenModule.SUPER_ADMIN]: [SERVICES.SSI_API.ACCESS_TYPES.WRITE_CREDIT],
};
export const QUEST_ACCESS_MATRIX = {
[TokenModule.DASHBOARD]: [],
[TokenModule.VERIFIER]: [],
[TokenModule.APP_AUTH]: [SERVICES.QUEST.ACCESS_TYPES.VERIFY_USER],
};