45 lines
1.4 KiB
Plaintext
45 lines
1.4 KiB
Plaintext
# Manage the transit secrets engine
|
|
path "transit/keys/<%= @config['app']['name'].downcase %>_*" {
|
|
capabilities = ["create", "read", "list"]
|
|
}
|
|
# Encrypt engines secrets
|
|
path "transit/encrypt/<%= @config['app']['name'].downcase %>_engines_*" {
|
|
capabilities = ["create", "read", "update"]
|
|
}
|
|
# Encrypt wallets secrets
|
|
path "transit/encrypt/<%= @config['app']['name'].downcase %>_wallets_*" {
|
|
capabilities = ["create", "read", "update"]
|
|
}
|
|
# Decrypt wallets secrets
|
|
path "transit/decrypt/<%= @config['app']['name'].downcase %>_wallets_*" {
|
|
capabilities = ["create", "read", "update"]
|
|
}
|
|
# Encrypt beneficiaries data
|
|
path "transit/encrypt/<%= @config['app']['name'].downcase %>_beneficiaries_*" {
|
|
capabilities = [ "create", "read", "update" ]
|
|
}
|
|
# Decrypt beneficiaries data
|
|
path "transit/decrypt/<%= @config['app']['name'].downcase %>_beneficiaries_*" {
|
|
capabilities = [ "create", "read", "update" ]
|
|
}
|
|
# Decrypt Payment Addresses secrets
|
|
path "transit/decrypt/<%= @config['app']['name'].downcase %>_payment_addresses_*" {
|
|
capabilities = ["create", "read", "update"]
|
|
}
|
|
# Renew tokens
|
|
path "auth/token/renew" {
|
|
capabilities = ["update"]
|
|
}
|
|
# Lookup tokens
|
|
path "auth/token/lookup" {
|
|
capabilities = ["update"]
|
|
}
|
|
# Manage otp keys
|
|
path "totp/keys/*" {
|
|
capabilities = ["create", "read", "update", "delete"]
|
|
}
|
|
# Verify an otp code
|
|
path "totp/code/*" {
|
|
capabilities = ["read","update"]
|
|
}
|