| /openbmc/bmcweb/test/redfish-core/include/ |
| H A D | privileges_test.cpp | 22 Privileges privileges{"Login", "ConfigureManager"}; in TEST() local
24 EXPECT_THAT(privileges.getActivePrivilegeNames(PrivilegeType::BASE), in TEST()
102 Privileges privileges; in TEST() local
104 EXPECT_THAT(privileges.getActivePrivilegeNames(PrivilegeType::BASE), in TEST()
107 EXPECT_THAT(privileges.getActivePrivilegeNames(PrivilegeType::OEM), in TEST()
113 Privileges privileges; in TEST() local
115 EXPECT_THAT(privileges.getActivePrivilegeNames(PrivilegeType::BASE), in TEST()
124 EXPECT_TRUE(privileges.setSinglePrivilege(privilege)); in TEST()
128 privileges.getActivePrivilegeNames(PrivilegeType::BASE), in TEST()
136 Privileges privileges{"OpenBMCHostConsole"}; in TEST() local
[all …]
|
| /openbmc/bmcweb/redfish-core/lib/ |
| H A D | redfish_sessions.hpp | 383 .privileges(redfish::privileges::headSession) in requestRoutesSession()
388 .privileges(redfish::privileges::getSession) in requestRoutesSession()
393 .privileges(redfish::privileges::deleteSession) in requestRoutesSession()
398 .privileges(redfish::privileges::headSessionCollection) in requestRoutesSession()
403 .privileges(redfish::privileges::getSessionCollection) in requestRoutesSession()
413 .privileges({}) in requestRoutesSession()
418 .privileges({}) in requestRoutesSession()
423 .privileges(redfish::privileges::headSessionService) in requestRoutesSession()
428 .privileges(redfish::privileges::getSessionService) in requestRoutesSession()
433 .privileges(redfish::privileges::patchSessionService) in requestRoutesSession()
|
| H A D | aggregation_service.hpp | 67 .privileges(redfish::privileges::headAggregationService) in requestRoutesAggregationService()
71 .privileges(redfish::privileges::getAggregationService) in requestRoutesAggregationService()
137 .privileges(redfish::privileges::getAggregationSourceCollection) in requestRoutesAggregationSourceCollection()
142 .privileges(redfish::privileges::getAggregationSourceCollection) in requestRoutesAggregationSourceCollection()
230 .privileges(redfish::privileges::getAggregationSource) in requestRoutesAggregationSource()
|
| H A D | redfish_v1.hpp | 243 .privileges(redfish::privileges::getJsonSchemaFile) in requestRoutesRedfish()
247 .privileges(redfish::privileges::getJsonSchemaFileCollection) in requestRoutesRedfish()
252 .privileges(redfish::privileges::getJsonSchemaFile) in requestRoutesRedfish()
259 .privileges(redfish::privileges::privilegeSetLogin)( in requestRoutesRedfish()
264 .privileges(redfish::privileges::privilegeSetLogin)( in requestRoutesRedfish()
|
| H A D | log_services.hpp | 1134 .privileges(redfish::privileges::getLogServiceCollection) in requestRoutesSystemLogServiceCollection()
1244 .privileges(redfish::privileges::getLogService) in requestRoutesEventLogService()
1340 .privileges({{"ConfigureComponents"}}) in requestRoutesJournalEventLogClear()
1632 .privileges(redfish::privileges::getLogEntryCollection) in requestRoutesJournalEventLogEntryCollection()
1713 .privileges(redfish::privileges::getLogEntry) in requestRoutesJournalEventLogEntry()
1746 .privileges(redfish::privileges::getLogEntryCollection) in requestRoutesDBusEventLogEntryCollection()
1862 .privileges(redfish::privileges::getLogEntry) in requestRoutesDBusEventLogEntry()
1890 .privileges(redfish::privileges::patchLogEntry) in requestRoutesDBusEventLogEntry()
1918 .privileges(redfish::privileges::deleteLogEntry) in requestRoutesDBusEventLogEntry()
2036 .privileges(redfish::privileges::getLogServiceCollection) in requestRoutesBMCLogServiceCollection()
[all …]
|
| H A D | certificate_service.hpp | 923 .privileges(redfish::privileges::getCertificateService) in requestRoutesCertificateService()
928 .privileges(redfish::privileges::getCertificateLocations) in requestRoutesCertificateService()
935 .privileges(redfish::privileges::postCertificateService) in requestRoutesCertificateService()
942 .privileges(redfish::privileges::postCertificateService) in requestRoutesCertificateService()
1065 .privileges(redfish::privileges::getCertificateCollection) in requestRoutesHTTPSCertificate()
1071 .privileges(redfish::privileges::postCertificateCollection) in requestRoutesHTTPSCertificate()
1078 .privileges(redfish::privileges::getCertificate) in requestRoutesHTTPSCertificate()
1186 .privileges(redfish::privileges::getCertificateCollection) in requestRoutesLDAPCertificate()
1191 .privileges(redfish::privileges::postCertificateCollection) in requestRoutesLDAPCertificate()
1196 .privileges(redfish::privileges::getCertificate) in requestRoutesLDAPCertificate()
[all …]
|
| H A D | thermal.hpp | 31 .privileges(redfish::privileges::getThermal) in requestRoutesThermal()
51 .privileges(redfish::privileges::patchThermal) in requestRoutesThermal()
|
| H A D | bios.hpp | 69 .privileges(redfish::privileges::getBios) in requestRoutesBiosService()
122 .privileges(redfish::privileges::postBios) in requestRoutesBiosReset()
|
| H A D | environment_metrics.hpp | 89 .privileges(redfish::privileges::headEnvironmentMetrics) in requestRoutesEnvironmentMetrics()
94 .privileges(redfish::privileges::getEnvironmentMetrics) in requestRoutesEnvironmentMetrics()
|
| H A D | power_subsystem.hpp | 97 .privileges(redfish::privileges::headPowerSubsystem) in requestRoutesPowerSubsystem()
102 .privileges(redfish::privileges::getPowerSubsystem) in requestRoutesPowerSubsystem()
|
| H A D | thermal_subsystem.hpp | 105 .privileges(redfish::privileges::headThermalSubsystem) in requestRoutesThermalSubsystem()
110 .privileges(redfish::privileges::getThermalSubsystem) in requestRoutesThermalSubsystem()
|
| H A D | message_registries.hpp | 69 .privileges(redfish::privileges::getMessageRegistryFileCollection) in requestRoutesMessageRegistryFileCollection()
132 .privileges(redfish::privileges::getMessageRegistryFile) in requestRoutesMessageRegistryFile()
212 .privileges(redfish::privileges::getMessageRegistryFile) in requestRoutesMessageRegistry()
|
| H A D | service_root.hpp | 127 .privileges(redfish::privileges::headServiceRoot) in requestRoutesServiceRoot()
131 .privileges(redfish::privileges::getServiceRoot) in requestRoutesServiceRoot()
|
| H A D | event_service.hpp | 66 .privileges(redfish::privileges::getEventService) in requestRoutesEventService()
121 .privileges(redfish::privileges::patchEventService) in requestRoutesEventService()
191 .privileges(redfish::privileges::postEventService) in requestRoutesSubmitTestEvent()
270 .privileges(redfish::privileges::getEventDestinationCollection) in requestRoutesEventDestinationCollection()
312 .privileges(redfish::privileges::postEventDestinationCollection) in requestRoutesEventDestinationCollection()
755 .privileges(redfish::privileges::getEventDestination) in requestRoutesEventDestination()
821 .privileges({{"ConfigureManager"}}) in requestRoutesEventDestination()
936 .privileges({{"ConfigureManager"}}) in requestRoutesEventDestination()
|
| H A D | roles.hpp | 77 .privileges(redfish::privileges::getRole) in requestRoutesRoles()
114 .privileges(redfish::privileges::getRoleCollection) in requestRoutesRoleCollection()
|
| H A D | fabric_adapters.hpp | 424 .privileges(redfish::privileges::getFabricAdapterCollection) in requestRoutesFabricAdapterCollection()
429 .privileges(redfish::privileges::headFabricAdapterCollection) in requestRoutesFabricAdapterCollection()
437 .privileges(redfish::privileges::getFabricAdapter) in requestRoutesFabricAdapters()
442 .privileges(redfish::privileges::headFabricAdapter) in requestRoutesFabricAdapters()
|
| H A D | metric_report.hpp | 81 .privileges(redfish::privileges::getMetricReportCollection) in requestRoutesMetricReportCollection()
109 .privileges(redfish::privileges::getMetricReport) in requestRoutesMetricReport()
|
| H A D | systems_logservices_hostlogger.hpp | 305 .privileges(redfish::privileges::getLogService) in requestRoutesSystemsLogServiceHostlogger()
310 .privileges(redfish::privileges::getLogEntryCollection) in requestRoutesSystemsLogServiceHostlogger()
316 .privileges(redfish::privileges::getLogEntry) in requestRoutesSystemsLogServiceHostlogger()
|
| H A D | storage.hpp | 100 .privileges(redfish::privileges::getStorageCollection) in requestRoutesStorageCollection()
104 .privileges(redfish::privileges::getStorageCollection) in requestRoutesStorageCollection()
283 .privileges(redfish::privileges::getStorage) in requestRoutesStorage()
288 .privileges(redfish::privileges::getStorage) in requestRoutesStorage()
726 .privileges(redfish::privileges::getDrive) in requestRoutesDrive()
831 .privileges(redfish::privileges::getDriveCollection) in requestRoutesChassisDrive()
972 .privileges(redfish::privileges::getChassis) in requestRoutesChassisDriveName()
1205 .privileges(redfish::privileges::getStorageControllerCollection) in requestRoutesStorageControllerCollection()
1213 .privileges(redfish::privileges::getStorageController) in requestRoutesStorageController()
|
| H A D | managers.hpp | 149 .privileges(redfish::privileges::postManager) in requestRoutesManagerResetAction()
216 .privileges(redfish::privileges::postManager) in requestRoutesManagerResetToDefaultsAction()
298 .privileges(redfish::privileges::getActionInfo) in requestRoutesManagerResetActionInfo()
591 .privileges(redfish::privileges::getManager) in requestRoutesManager()
884 .privileges(redfish::privileges::patchManager) in requestRoutesManager()
982 .privileges(redfish::privileges::getManagerCollection) in requestRoutesManagerCollection()
|
| H A D | manager_logservices_journal.hpp | 342 .privileges(redfish::privileges::getLogService) in requestRoutesBMCJournalLogService()
347 .privileges(redfish::privileges::getLogEntryCollection) in requestRoutesBMCJournalLogService()
353 .privileges(redfish::privileges::getLogEntry) in requestRoutesBMCJournalLogService()
|
| H A D | cable.hpp | 153 .privileges(redfish::privileges::getCable) in requestRoutesCable()
219 .privileges(redfish::privileges::getCableCollection) in requestRoutesCableCollection()
|
| H A D | account_service.hpp | 2304 .privileges(redfish::privileges::headAccountService) in requestAccountServiceRoutes()
2309 .privileges(redfish::privileges::getAccountService) in requestAccountServiceRoutes()
2314 .privileges(redfish::privileges::patchAccountService) in requestAccountServiceRoutes()
2321 .privileges(redfish::privileges::headCertificateCollection) in requestAccountServiceRoutes()
2328 .privileges(redfish::privileges::getCertificateCollection) in requestAccountServiceRoutes()
2335 .privileges(redfish::privileges::headCertificate) in requestAccountServiceRoutes()
2342 .privileges(redfish::privileges::getCertificate) in requestAccountServiceRoutes()
2347 .privileges(redfish::privileges::headManagerAccountCollection) in requestAccountServiceRoutes()
2352 .privileges(redfish::privileges::getManagerAccountCollection) in requestAccountServiceRoutes()
2357 .privileges(redfish::privileges::postManagerAccountCollection) in requestAccountServiceRoutes()
[all …]
|
| H A D | systems_logservices_postcodes.hpp | 616 .privileges(redfish::privileges::getLogService) in requestRoutesSystemsLogServicesPostCode()
625 .privileges({{"ConfigureComponents"}}) in requestRoutesSystemsLogServicesPostCode()
631 .privileges(redfish::privileges::getLogEntryCollection) in requestRoutesSystemsLogServicesPostCode()
637 .privileges(redfish::privileges::getLogEntry) in requestRoutesSystemsLogServicesPostCode()
644 .privileges(redfish::privileges::getLogEntry) in requestRoutesSystemsLogServicesPostCode()
|
| /openbmc/docs/designs/ |
| H A D | redfish-authorization.md | 25 of them is assigned a fixed array of standard privileges (e.g., `Login`,
32 type. It is used to determine whether the identity privileges of an
40 `ConfigureComponents`, and `ConfigureSelf` privileges, is authorized to send a
63 group, privileges, status, and account policies). It has a hardcoded list of
64 user groups (SSH, IPMI, Redfish, Web) and a hardcoded list of privileges
65 ("priv-admin", "priv-operator", "priv-user", "priv-noaccess"). These privileges
94 phosphor-user-manager to query the user's privileges and uses a hardcoded map to
95 convert the privileges to Redfish roles. The hardcoded map is listed below:
97 | Phosphor-user-manager privileges (implemented as groups) | BMCWeb Redfish Roles |
104 To map Redfish role to their assigned Redfish privileges, BMCWeb implements the
[all …]
|