Initial commit
This commit is contained in:
Yaser
18
config/barong/authz_rules.yml
Normal file
18
config/barong/authz_rules.yml
Normal file
@@ -0,0 +1,18 @@
|
||||
#
|
||||
# pass for whitelisted (public) routes
|
||||
# block for blacklisted routes
|
||||
#
|
||||
rules:
|
||||
pass:
|
||||
- api/v2/dalan/public
|
||||
- api/v2/dalan/identity
|
||||
- api/v2/dena/public
|
||||
- api/v2/dena/coinmarketcap
|
||||
- api/v2/dena/coingecko
|
||||
- api/v2/ranger/public
|
||||
- api/v2/applogic/public
|
||||
- api/v2/arke/public
|
||||
- api/v2/finex/public
|
||||
block:
|
||||
- api/v2/dalan/management
|
||||
- api/v2/dena/management
|
||||
52
config/barong/barong.yml
Normal file
52
config/barong/barong.yml
Normal file
@@ -0,0 +1,52 @@
|
||||
activation_requirements:
|
||||
email: 'verified'
|
||||
state_triggers:
|
||||
banned:
|
||||
- ban
|
||||
- fraud
|
||||
deleted:
|
||||
- delete
|
||||
locked:
|
||||
- suspicious
|
||||
- lock
|
||||
document_types:
|
||||
- Passport
|
||||
- Identity card
|
||||
- Driver license
|
||||
- Utility Bill
|
||||
- Residental
|
||||
- Institutional
|
||||
- Poa
|
||||
- Selfie
|
||||
document_categories:
|
||||
- front_side
|
||||
- selfie
|
||||
- back_side
|
||||
user_storage_titles:
|
||||
# - personal ## example
|
||||
# - company ## example
|
||||
captcha_protected_endpoints: []
|
||||
# - user_create
|
||||
# - session_create
|
||||
# - password_reset
|
||||
# - email_confirmation
|
||||
|
||||
profile_verification_roles:
|
||||
- superadmin
|
||||
# - admin
|
||||
# - kyc_worker
|
||||
|
||||
kyc_levels:
|
||||
1:
|
||||
2: profile
|
||||
3: access_phone
|
||||
4: card
|
||||
5: iban
|
||||
2:
|
||||
6: poa
|
||||
7: telephone
|
||||
8: selfie
|
||||
9: owner_phone
|
||||
3:
|
||||
10: vip
|
||||
|
||||
382
config/barong/seeds.yml
Normal file
382
config/barong/seeds.yml
Normal file
@@ -0,0 +1,382 @@
|
||||
# List of Barong administrators.
|
||||
#
|
||||
# Other parameters that you can set here can be found in Account,
|
||||
# Profile and Phone models (e.g. app/models/account.rb...); all the
|
||||
# model properties are listed at the very bottom of this models files.
|
||||
#
|
||||
# Note: email is the only required field here.
|
||||
users:
|
||||
- email: admin@test.com
|
||||
password: "123qwe!@#QWE"
|
||||
role: superadmin
|
||||
state: active
|
||||
level: 3
|
||||
- email: user@test.com
|
||||
password: "123qwe!@#QWE"
|
||||
role: member
|
||||
state: active
|
||||
level: 0
|
||||
- email: bot@test.com
|
||||
password: "123qwe!@#QWE"
|
||||
role: member
|
||||
state: active
|
||||
level: 3
|
||||
|
||||
levels:
|
||||
- key: email
|
||||
id: 1
|
||||
value: verified
|
||||
description: "User enter a valid code after registration"
|
||||
- key: profile
|
||||
id: 2
|
||||
value: verified
|
||||
description: "User personal documents have been verified"
|
||||
- key: access_phone
|
||||
id: 3
|
||||
value: verified
|
||||
description: "User entered a valid code from sms"
|
||||
- key: card
|
||||
id: 4
|
||||
value: verified
|
||||
description: "User card number have been verified"
|
||||
- key: iban
|
||||
id: 5
|
||||
value: verified
|
||||
description: "User iban have been verified"
|
||||
- key: poa
|
||||
id: 6
|
||||
value: verified
|
||||
description: "User card bank have been verified"
|
||||
- key: telephone
|
||||
id: 7
|
||||
value: verified
|
||||
description: "User entered a valid code from ring call"
|
||||
- key: selfie
|
||||
id: 8
|
||||
value: verified
|
||||
description: "User selfie documents have been verified"
|
||||
- key: owner_phone
|
||||
id: 9
|
||||
value: verified
|
||||
description: "User owner mobile have been verified"
|
||||
- key: vip
|
||||
id: 10
|
||||
value: verified
|
||||
description: "User Vip have been verified"
|
||||
|
||||
restrictions: {}
|
||||
# - { category: whitelist, scope: country, value: UA, state: disabled }
|
||||
# - { category: maintenance, scope: all, value: all, state: disabled }
|
||||
# - { category: blacklist, scope: ip, value: 164.116.47.255, state: disabled, code: 433 }
|
||||
# - { category: blacklist, scope: ip_subnet, value: 164.116.47.0/24, state: disabled, code: 434 }
|
||||
# - { category: blacklist, scope: country, value: USA, state: disabled, code: 435 }
|
||||
# - { category: blacklist, scope: continent, value: SA, state: disabled, code: 436 }
|
||||
|
||||
permissions:
|
||||
# SUPER ADMIN has an access to the whole system without any limits
|
||||
# so we can just grant him access to /api/v2/*
|
||||
- { role: superadmin, verb: all, path: api/v2, action: accept }
|
||||
# Rango(ranger) access
|
||||
- { role: superadmin, verb: get, path: api/v2/ranger, action: accept }
|
||||
# we are watching after you 0_0
|
||||
- { role: superadmin, verb: post, path: api/v2/, action: audit }
|
||||
- { role: superadmin, verb: put, path: api/v2/, action: audit }
|
||||
- { role: superadmin, verb: delete, path: api/v2/, action: audit }
|
||||
|
||||
# ADMIN
|
||||
# admin has nearly full access to barong and peatio api, except managing permissions
|
||||
- { role: admin, verb: all, path: api/v2, action: accept }
|
||||
# ranger access
|
||||
- { role: admin, verb: get, path: api/v2/ranger, action: accept }
|
||||
# Finex upstream access
|
||||
- { role: admin, verb: get, path: api/v2/open_finance, action: accept }
|
||||
# admin doesnt have access to manage platform roles and permissions
|
||||
- { role: admin, verb: all, path: api/v2/dalan/admin/permissions, action: drop }
|
||||
# admin doesnt have access to manage roles
|
||||
- { role: admin, verb: all, path: api/v2/dalan/admin/users/role, action: drop }
|
||||
# admin doesnt have access to admin activities
|
||||
- { role: admin, verb: all, path: api/v2/dalan/admin/activities/admin, action: drop }
|
||||
# we are watching after you 0_0
|
||||
- { role: admin, verb: post, path: api/v2/, action: audit }
|
||||
- { role: admin, verb: put, path: api/v2/, action: audit }
|
||||
- { role: admin, verb: delete, path: api/v2/, action: audit }
|
||||
|
||||
# ACCOUNTANT
|
||||
# accountant has a read access to Barong admin
|
||||
- { role: accountant, verb: get, path: api/v2/dalan/admin, action: accept }
|
||||
# accountant has a read access to Peatio financial information and creating of adjustments
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/members, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/beneficiaries, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/currencies, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/blockchains, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/wallets, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/trading_fees, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/withdraw_limits, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/orders, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/markets, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/engine, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/trades, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/deposits, action: accept }
|
||||
- { role: accountant, verb: post, path: api/v2/dena/admin/deposits/new, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/withdraws, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/adjustments, action: accept }
|
||||
- { role: accountant, verb: post, path: api/v2/dena/admin/adjustments/new, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/assets, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/liabilities, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/revenues, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/expenses, action: accept }
|
||||
- { role: accountant, verb: get, path: api/v2/dena/admin/internal_transfers, action: accept }
|
||||
# accountant doesnt have access to see pending documents
|
||||
- { role: accountant, verb: get, path: api/v2/dalan/admin/users/documents/pending, action: drop }
|
||||
# accountant doesnt have access to manage platform roles and permissions
|
||||
- { role: accountant, verb: all, path: api/v2/dalan/admin/users/role, action: drop }
|
||||
- { role: accountant, verb: all, path: api/v2/dalan/admin/permissions, action: drop }
|
||||
# accountant doesnt have access to admin activities
|
||||
- { role: accountant, verb: all, path: api/v2/dalan/admin/activities/admin, action: drop }
|
||||
# we are watching after you 0_0
|
||||
- { role: accountant, verb: post, path: api/v2/, action: audit }
|
||||
- { role: accountant, verb: put, path: api/v2/, action: audit }
|
||||
- { role: accountant, verb: delete, path: api/v2/, action: audit }
|
||||
# has standard user permissions to ACCOUNT, MARKET, RESOURCE modules
|
||||
- { role: accountant, verb: all, path: api/v2/dena/account, action: accept }
|
||||
- { role: accountant, verb: all, path: api/v2/dena/market, action: accept }
|
||||
- { role: accountant, verb: all, path: api/v2/finex/market, action: accept }
|
||||
- { role: accountant, verb: all, path: api/v2/dalan/resource, action: accept }
|
||||
- { role: accountant, verb: all, path: api/v2/dena/account/internal_transfers, action: accept }
|
||||
- { role: accountant, verb: all, path: api/v2/dena/swagger, action: accept }
|
||||
# Drop Peatio order endpoint requests
|
||||
# ranger access
|
||||
- { role: accountant, verb: get, path: api/v2/ranger, action: accept }
|
||||
# applogic access
|
||||
- { role: accountant, verb: all, path: api/v2/applogic, action: accept }
|
||||
# get abilities
|
||||
- { role: accountant, verb: all, path: api/v2/dena/admin/abilities, action: accept }
|
||||
- { role: accountant, verb: all, path: api/v2/dalan/admin/abilities, action: accept }
|
||||
|
||||
# COMPLIANCE
|
||||
- { role: compliance, verb: get, path: api/v2/dalan/admin, action: accept }
|
||||
# has an access to CRUD of user-related resources
|
||||
- { role: compliance, verb: get, path: api/v2/dena/admin/members, action: accept }
|
||||
- { role: compliance, verb: get, path: api/v2/dena/admin/beneficiaries, action: accept }
|
||||
- { role: compliance, verb: get, path: api/v2/dena/admin/currencies, action: accept }
|
||||
- { role: compliance, verb: get, path: api/v2/dena/admin/trades, action: accept }
|
||||
- { role: compliance, verb: get, path: api/v2/dena/admin/orders, action: accept }
|
||||
- { role: compliance, verb: all, path: api/v2/dalan/admin/users, action: accept }
|
||||
# has ability to see deposit, withdraw, operations (partial)
|
||||
- { role: compliance, verb: get, path: api/v2/dena/admin/deposits, action: accept }
|
||||
- { role: compliance, verb: get, path: api/v2/dena/admin/withdraws, action: accept }
|
||||
- { role: compliance, verb: get, path: api/v2/dena/admin/assets, action: accept }
|
||||
- { role: compliance, verb: get, path: api/v2/dena/admin/liabilities, action: accept }
|
||||
- { role: compliance, verb: get, path: api/v2/dena/admin/expenses, action: accept }
|
||||
- { role: compliance, verb: get, path: api/v2/dena/admin/markets, action: accept }
|
||||
- { role: compliance, verb: get, path: api/v2/dena/admin/engine, action: accept }
|
||||
# has no ability to see the configurations
|
||||
- { role: compliance, verb: all, path: api/v2/dena/admin/adjustments, action: drop }
|
||||
- { role: compliance, verb: all, path: api/v2/dena/admin/revenues, action: drop }
|
||||
- { role: compliance, verb: all, path: api/v2/dena/admin/blockchains, action: drop }
|
||||
- { role: compliance, verb: all, path: api/v2/dena/admin/wallets, action: drop }
|
||||
- { role: compliance, verb: all, path: api/v2/dena/admin/trading_fees, action: drop }
|
||||
- { role: compliance, verb: all, path: api/v2/dena/admin/withdraw_limits, action: drop }
|
||||
- { role: compliance, verb: all, path: api/v2/dalan/admin/restrictions, action: drop }
|
||||
# compliance doesnt have access to change users roles
|
||||
- { role: compliance, verb: all, path: api/v2/dalan/admin/users/role, action: drop }
|
||||
# compliance doesnt have access to admin activities
|
||||
- { role: compliance, verb: all, path: api/v2/dalan/admin/activities/admin, action: drop }
|
||||
# compliance doesnt have access to manage platform roles and permissions
|
||||
- { role: compliance, verb: all, path: api/v2/dalan/admin/permissions, action: drop }
|
||||
# we are watching after you 0_0
|
||||
- { role: compliance, verb: post, path: api/v2/, action: audit }
|
||||
- { role: compliance, verb: put, path: api/v2/, action: audit }
|
||||
- { role: compliance, verb: delete, path: api/v2/, action: audit }
|
||||
# has standard user permissions to ACCOUNT, MARKET, RESOURCE modules
|
||||
- { role: compliance, verb: all, path: api/v2/dena/account, action: accept }
|
||||
- { role: compliance, verb: all, path: api/v2/dena/market, action: accept }
|
||||
- { role: compliance, verb: all, path: api/v2/finex/market, action: accept }
|
||||
- { role: compliance, verb: all, path: api/v2/dalan/resource, action: accept }
|
||||
- { role: compliance, verb: all, path: api/v2/dena/account/internal_transfers, action: accept }
|
||||
- { role: compliance, verb: all, path: api/v2/dena/swagger, action: accept }
|
||||
# Drop Peatio order endpoint requests
|
||||
# ranger access
|
||||
- { role: compliance, verb: get, path: api/v2/ranger, action: accept }
|
||||
# applogic access
|
||||
- { role: compliance, verb: all, path: api/v2/applogic, action: accept }
|
||||
# get abilities
|
||||
- { role: compliance, verb: all, path: api/v2/dena/admin/abilities, action: accept }
|
||||
- { role: compliance, verb: all, path: api/v2/dalan/admin/abilities, action: accept }
|
||||
|
||||
# TECHNICAL
|
||||
# has an access to CRUD of peatio admin functionality on market, blockchain, wallets, currencies
|
||||
- { role: technical, verb: get, path: api/v2/dalan/admin, action: accept }
|
||||
- { role: technical, verb: get, path: api/v2/dena/admin, action: accept }
|
||||
# technical has a configuration access to Peatio admin
|
||||
- { role: technical, verb: all, path: api/v2/dena/admin/blockchains, action: accept }
|
||||
- { role: technical, verb: all, path: api/v2/dena/admin/currencies, action: accept }
|
||||
- { role: technical, verb: all, path: api/v2/dena/admin/markets, action: accept }
|
||||
- { role: technical, verb: all, path: api/v2/dena/admin/wallets, action: accept }
|
||||
- { role: technical, verb: all, path: api/v2/dena/admin/trading_fees, action: accept }
|
||||
- { role: technical, verb: all, path: api/v2/dena/admin/withdraw_limits, action: accept }
|
||||
- { role: technical, verb: get, path: api/v2/dena/admin/internal_transfers, action: accept }
|
||||
- { role: technical, verb: all, path: api/v2/dena/admin/engine, action: accept }
|
||||
# technical has access to delete orders
|
||||
- { role: technical, verb: delete, path: api/v2/finex/admin/bulk/orders_by_id, action: accept }
|
||||
- { role: technical, verb: post, path: api/v2/finex/admin/orders/cancel, action: accept }
|
||||
# technical has an ability to create and update restrictions
|
||||
- { role: technical, verb: all, path: api/v2/dalan/admin/restrictions, action: accept }
|
||||
# has no ability to see and update Deposit, Withdraw, Adjustments
|
||||
- { role: technical, verb: all, path: api/v2/dena/admin/deposits, action: drop }
|
||||
- { role: technical, verb: all, path: api/v2/dena/admin/withdraws, action: drop }
|
||||
- { role: technical, verb: all, path: api/v2/dena/admin/adjustments, action: drop }
|
||||
# Finex upstream access
|
||||
- { role: technical, verb: get, path: api/v2/open_finance, action: accept }
|
||||
# technical doesnt have access to see pending documents
|
||||
- { role: technical, verb: get, path: api/v2/dalan/admin/users/documents/pending, action: drop }
|
||||
# technical doesnt have access to admin activities
|
||||
- { role: technical, verb: all, path: api/v2/dalan/admin/activities/admin, action: drop }
|
||||
# technical doesnt have access to manage platform roles and permissions
|
||||
- { role: technical, verb: all, path: api/v2/dalan/admin/permissions, action: drop }
|
||||
# we are watching after you 0_0
|
||||
- { role: technical, verb: post, path: api/v2/, action: audit }
|
||||
- { role: technical, verb: put, path: api/v2/, action: audit }
|
||||
- { role: technical, verb: delete, path: api/v2/, action: audit }
|
||||
# has standard user permissions to ACCOUNT, MARKET, RESOURCE modules
|
||||
- { role: technical, verb: all, path: api/v2/dena/account, action: accept }
|
||||
- { role: technical, verb: all, path: api/v2/dena/market, action: accept }
|
||||
- { role: technical, verb: all, path: api/v2/finex/market, action: accept }
|
||||
- { role: technical, verb: all, path: api/v2/dalan/resource, action: accept }
|
||||
- { role: technical, verb: all, path: api/v2/dena/account/internal_transfers, action: accept }
|
||||
- { role: technical, verb: all, path: api/v2/dena/swagger, action: accept }
|
||||
# Drop Peatio order endpoint requests
|
||||
# ranger access
|
||||
- { role: technical, verb: get, path: api/v2/ranger, action: accept }
|
||||
# applogic access
|
||||
- { role: technical, verb: all, path: api/v2/applogic, action: accept }
|
||||
# get abilities
|
||||
- { role: technical, verb: all, path: api/v2/dena/admin/abilities, action: accept }
|
||||
- { role: technical, verb: all, path: api/v2/dalan/admin/abilities, action: accept }
|
||||
|
||||
# SUPPORT
|
||||
# has read only access to several statistic and user-related endpoints
|
||||
- { role: support, verb: get, path: api/v2/dalan/admin, action: accept }
|
||||
- { role: support, verb: get, path: api/v2/dena/admin, action: accept }
|
||||
# has no ability to see the configurations
|
||||
- { role: support, verb: all, path: api/v2/dena/admin/adjustments, action: drop }
|
||||
- { role: support, verb: all, path: api/v2/dena/admin/revenues, action: drop }
|
||||
- { role: support, verb: all, path: api/v2/dena/admin/blockchains, action: drop }
|
||||
- { role: support, verb: all, path: api/v2/dena/admin/wallets, action: drop }
|
||||
- { role: support, verb: all, path: api/v2/dena/admin/trading_fees, action: drop }
|
||||
- { role: support, verb: all, path: api/v2/dena/admin/withdraw_limits, action: drop }
|
||||
- { role: support, verb: all, path: api/v2/dalan/admin/restrictions, action: drop }
|
||||
- { role: support, verb: get, path: api/v2/dena/admin/internal_transfers, action: accept }
|
||||
- { role: support, verb: get, path: api/v2/dena/admin/engine, action: accept }
|
||||
# has ability to disable 2FA
|
||||
- { role: support, verb: post, path: api/v2/dalan/admin/users/update, action: accept }
|
||||
# support doesnt have access to admin activities
|
||||
- { role: support, verb: all, path: api/v2/dalan/admin/activities/admin, action: drop }
|
||||
# support doesnt have access to manage platform roles and permissions
|
||||
- { role: support, verb: all, path: api/v2/dalan/admin/permissions, action: drop }
|
||||
- { role: support, verb: all, path: api/v2/dalan/admin/permissions, action: drop }
|
||||
# we are watching after you 0_0
|
||||
- { role: support, verb: post, path: api/v2/, action: audit }
|
||||
- { role: support, verb: put, path: api/v2/, action: audit }
|
||||
- { role: support, verb: delete, path: api/v2/, action: audit }
|
||||
# has standard user permissions to ACCOUNT, MARKET, RESOURCE modules
|
||||
- { role: support, verb: all, path: api/v2/dena/account, action: accept }
|
||||
- { role: support, verb: all, path: api/v2/dena/market, action: accept }
|
||||
- { role: support, verb: all, path: api/v2/finex/market, action: accept }
|
||||
- { role: support, verb: all, path: api/v2/dalan/resource, action: accept }
|
||||
- { role: support, verb: all, path: api/v2/dena/account/internal_transfers, action: accept }
|
||||
- { role: support, verb: all, path: api/v2/dena/swagger, action: accept }
|
||||
# Drop Peatio order endpoint requests
|
||||
# ranger access
|
||||
- { role: support, verb: get, path: api/v2/ranger, action: accept }
|
||||
# applogic access
|
||||
- { role: support, verb: all, path: api/v2/applogic, action: accept }
|
||||
# get abilities
|
||||
- { role: support, verb: all, path: api/v2/dena/admin/abilities, action: accept }
|
||||
- { role: support, verb: all, path: api/v2/dalan/admin/abilities, action: accept }
|
||||
|
||||
# TRADER
|
||||
# has standard user permissions to ACCOUNT, MARKET, RESOURCE modules
|
||||
- { role: trader, verb: all, path: api/v2/dena/account, action: accept }
|
||||
- { role: trader, verb: all, path: api/v2/dena/market, action: accept }
|
||||
- { role: trader, verb: all, path: api/v2/dalan/resource, action: accept }
|
||||
- { role: trader, verb: all, path: api/v2/resource, action: accept }
|
||||
- { role: trader, verb: all, path: api/v2/dena/account/internal_transfers, action: accept }
|
||||
- { role: trader, verb: all, path: api/v2/dena/swagger, action: accept }
|
||||
# ranger access
|
||||
- { role: trader, verb: get, path: api/v2/ranger, action: accept }
|
||||
# Finex upstream access
|
||||
- { role: trader, verb: get, path: api/v2/open_finance, action: accept }
|
||||
# applogic access
|
||||
- { role: trader, verb: all, path: api/v2/applogic, action: accept }
|
||||
|
||||
# MEMBER
|
||||
# has standard user permissions to ACCOUNT, MARKET, RESOURCE modules
|
||||
- { role: member, verb: all, path: api/v2/dena/account, action: accept }
|
||||
- { role: member, verb: all, path: api/v2/dena/market, action: accept }
|
||||
- { role: member, verb: all, path: api/v2/dalan/resource, action: accept }
|
||||
- { role: member, verb: all, path: api/v2/resource, action: accept }
|
||||
- { role: member, verb: all, path: api/v2/dena/account/internal_transfers, action: accept }
|
||||
- { role: member, verb: all, path: api/v2/dena/swagger, action: accept }
|
||||
# ranger access
|
||||
- { role: member, verb: get, path: api/v2/ranger, action: accept }
|
||||
# Finex upstream access
|
||||
- { role: member, verb: get, path: api/v2/open_finance, action: accept }
|
||||
# applogic access
|
||||
- { role: member, verb: all, path: api/v2/applogic, action: accept }
|
||||
|
||||
# BROKER
|
||||
# has standard user permissions to ACCOUNT, MARKET, RESOURCE modules
|
||||
- { role: broker, verb: all, path: api/v2/dena/account, action: accept }
|
||||
- { role: broker, verb: all, path: api/v2/dena/market, action: accept }
|
||||
- { role: broker, verb: all, path: api/v2/dalan/resource, action: accept }
|
||||
- { role: broker, verb: all, path: api/v2/resource, action: accept }
|
||||
- { role: broker, verb: all, path: api/v2/dena/account/internal_transfers, action: accept }
|
||||
- { role: broker, verb: all, path: api/v2/dena/swagger, action: accept }
|
||||
# ranger access
|
||||
- { role: broker, verb: get, path: api/v2/ranger, action: accept }
|
||||
# Finex upstream access
|
||||
- { role: broker, verb: get, path: api/v2/open_finance, action: accept }
|
||||
# applogic access
|
||||
- { role: broker, verb: all, path: api/v2/applogic, action: accept }
|
||||
|
||||
# MAKER
|
||||
# has standard user permissions to ACCOUNT, MARKET, RESOURCE modules
|
||||
- { role: maker, verb: all, path: api/v2/dena/account, action: accept }
|
||||
- { role: maker, verb: all, path: api/v2/dena/market, action: accept }
|
||||
- { role: maker, verb: all, path: api/v2/dalan/resource, action: accept }
|
||||
- { role: maker, verb: all, path: api/v2/resource, action: accept }
|
||||
- { role: maker, verb: all, path: api/v2/dena/account/internal_transfers, action: accept }
|
||||
- { role: maker, verb: all, path: api/v2/dena/swagger, action: accept }
|
||||
# ranger access
|
||||
- { role: maker, verb: get, path: api/v2/ranger, action: accept }
|
||||
# Finex upstream access
|
||||
- { role: maker, verb: get, path: api/v2/open_finance, action: accept }
|
||||
# applogic access
|
||||
- { role: maker, verb: all, path: api/v2/applogic, action: accept }
|
||||
|
||||
# Service Account Maker
|
||||
# has standard user permissions to ACCOUNT, MARKET, RESOURCE modules
|
||||
- { role: sa_maker, verb: all, path: api/v2/dena/account, action: accept }
|
||||
- { role: sa_maker, verb: all, path: api/v2/dena/market, action: accept }
|
||||
- { role: sa_maker, verb: all, path: api/v2/dalan/resource, action: accept }
|
||||
- { role: sa_maker, verb: all, path: api/v2/dena/account/internal_transfers, action: accept }
|
||||
- { role: sa_maker, verb: all, path: api/v2/dena/swagger, action: accept }
|
||||
# Service Account can not interact with Password, 2FA, KYC, API keys, Beneficiary, Deposit and Withdraw
|
||||
- { role: sa_maker, verb: all, path: api/v2/dalan/resource/otp, action: drop }
|
||||
- { role: sa_maker, verb: all, path: api/v2/dalan/resource/phones, action: drop }
|
||||
- { role: sa_maker, verb: all, path: api/v2/dalan/resource/profiles, action: drop }
|
||||
- { role: sa_maker, verb: all, path: api/v2/dalan/resource/documents, action: drop }
|
||||
- { role: sa_maker, verb: all, path: api/v2/dalan/resource/addresses, action: drop }
|
||||
- { role: sa_maker, verb: all, path: api/v2/applogic/private/tenants, action: drop }
|
||||
- { role: sa_maker, verb: all, path: api/v2/dalan/resource/api_keys, action: drop }
|
||||
- { role: sa_maker, verb: all, path: api/v2/dalan/resource/users/password, action: drop }
|
||||
- { role: sa_maker, verb: all, path: api/v2/dena/account/deposit_address, action: drop }
|
||||
- { role: sa_maker, verb: all, path: api/v2/dena/account/withdraws, action: drop }
|
||||
- { role: sa_maker, verb: all, path: api/v2/dena/account/beneficiaries, action: drop }
|
||||
# Finex upstream access
|
||||
- { role: sa_maker, verb: get, path: api/v2/open_finance, action: accept }
|
||||
# ranger access
|
||||
- { role: sa_maker, verb: get, path: api/v2/ranger, action: accept }
|
||||
# applogic access
|
||||
- { role: sa_maker, verb: all, path: api/v2/applogic, action: accept }
|
||||
Reference in New Issue
Block a user