xref: /openbmc/bmcweb/features/redfish/schema/dmtf/json-schema/AllowDeny.v1_0_3.json (revision f2a8e57ede74a8252100b2281e3f4d170aa69391)
1*f2a8e57eSGunnar Mills{
2*f2a8e57eSGunnar Mills    "$id": "http://redfish.dmtf.org/schemas/v1/AllowDeny.v1_0_3.json",
3*f2a8e57eSGunnar Mills    "$ref": "#/definitions/AllowDeny",
4*f2a8e57eSGunnar Mills    "$schema": "http://redfish.dmtf.org/schemas/v1/redfish-schema-v1.json",
5*f2a8e57eSGunnar Mills    "copyright": "Copyright 2014-2024 DMTF. For the full DMTF copyright policy, see http://www.dmtf.org/about/policies/copyright",
6*f2a8e57eSGunnar Mills    "definitions": {
7*f2a8e57eSGunnar Mills        "Actions": {
8*f2a8e57eSGunnar Mills            "additionalProperties": false,
9*f2a8e57eSGunnar Mills            "description": "The available actions for this resource.",
10*f2a8e57eSGunnar Mills            "longDescription": "This type shall contain the available actions for this resource.",
11*f2a8e57eSGunnar Mills            "patternProperties": {
12*f2a8e57eSGunnar Mills                "^([a-zA-Z_][a-zA-Z0-9_]*)?@(odata|Redfish|Message)\\.[a-zA-Z_][a-zA-Z0-9_]*$": {
13*f2a8e57eSGunnar Mills                    "description": "This property shall specify a valid odata or Redfish property.",
14*f2a8e57eSGunnar Mills                    "type": [
15*f2a8e57eSGunnar Mills                        "array",
16*f2a8e57eSGunnar Mills                        "boolean",
17*f2a8e57eSGunnar Mills                        "integer",
18*f2a8e57eSGunnar Mills                        "number",
19*f2a8e57eSGunnar Mills                        "null",
20*f2a8e57eSGunnar Mills                        "object",
21*f2a8e57eSGunnar Mills                        "string"
22*f2a8e57eSGunnar Mills                    ]
23*f2a8e57eSGunnar Mills                }
24*f2a8e57eSGunnar Mills            },
25*f2a8e57eSGunnar Mills            "properties": {
26*f2a8e57eSGunnar Mills                "Oem": {
27*f2a8e57eSGunnar Mills                    "$ref": "#/definitions/OemActions",
28*f2a8e57eSGunnar Mills                    "description": "The available OEM-specific actions for this resource.",
29*f2a8e57eSGunnar Mills                    "longDescription": "This property shall contain the available OEM-specific actions for this resource."
30*f2a8e57eSGunnar Mills                }
31*f2a8e57eSGunnar Mills            },
32*f2a8e57eSGunnar Mills            "type": "object"
33*f2a8e57eSGunnar Mills        },
34*f2a8e57eSGunnar Mills        "AllowDeny": {
35*f2a8e57eSGunnar Mills            "additionalProperties": false,
36*f2a8e57eSGunnar Mills            "description": "The `AllowDeny` schema represents a set of allow or deny configurations.",
37*f2a8e57eSGunnar Mills            "longDescription": "This resource shall represent an AllowDeny resource in a Redfish implementation.",
38*f2a8e57eSGunnar Mills            "patternProperties": {
39*f2a8e57eSGunnar Mills                "^([a-zA-Z_][a-zA-Z0-9_]*)?@(odata|Redfish|Message)\\.[a-zA-Z_][a-zA-Z0-9_]*$": {
40*f2a8e57eSGunnar Mills                    "description": "This property shall specify a valid odata or Redfish property.",
41*f2a8e57eSGunnar Mills                    "type": [
42*f2a8e57eSGunnar Mills                        "array",
43*f2a8e57eSGunnar Mills                        "boolean",
44*f2a8e57eSGunnar Mills                        "integer",
45*f2a8e57eSGunnar Mills                        "number",
46*f2a8e57eSGunnar Mills                        "null",
47*f2a8e57eSGunnar Mills                        "object",
48*f2a8e57eSGunnar Mills                        "string"
49*f2a8e57eSGunnar Mills                    ]
50*f2a8e57eSGunnar Mills                }
51*f2a8e57eSGunnar Mills            },
52*f2a8e57eSGunnar Mills            "properties": {
53*f2a8e57eSGunnar Mills                "@odata.context": {
54*f2a8e57eSGunnar Mills                    "$ref": "http://redfish.dmtf.org/schemas/v1/odata-v4.json#/definitions/context"
55*f2a8e57eSGunnar Mills                },
56*f2a8e57eSGunnar Mills                "@odata.etag": {
57*f2a8e57eSGunnar Mills                    "$ref": "http://redfish.dmtf.org/schemas/v1/odata-v4.json#/definitions/etag"
58*f2a8e57eSGunnar Mills                },
59*f2a8e57eSGunnar Mills                "@odata.id": {
60*f2a8e57eSGunnar Mills                    "$ref": "http://redfish.dmtf.org/schemas/v1/odata-v4.json#/definitions/id"
61*f2a8e57eSGunnar Mills                },
62*f2a8e57eSGunnar Mills                "@odata.type": {
63*f2a8e57eSGunnar Mills                    "$ref": "http://redfish.dmtf.org/schemas/v1/odata-v4.json#/definitions/type"
64*f2a8e57eSGunnar Mills                },
65*f2a8e57eSGunnar Mills                "Actions": {
66*f2a8e57eSGunnar Mills                    "$ref": "#/definitions/Actions",
67*f2a8e57eSGunnar Mills                    "description": "The available actions for this resource.",
68*f2a8e57eSGunnar Mills                    "longDescription": "This property shall contain the available actions for this resource."
69*f2a8e57eSGunnar Mills                },
70*f2a8e57eSGunnar Mills                "AllowType": {
71*f2a8e57eSGunnar Mills                    "anyOf": [
72*f2a8e57eSGunnar Mills                        {
73*f2a8e57eSGunnar Mills                            "$ref": "#/definitions/AllowType"
74*f2a8e57eSGunnar Mills                        },
75*f2a8e57eSGunnar Mills                        {
76*f2a8e57eSGunnar Mills                            "type": "null"
77*f2a8e57eSGunnar Mills                        }
78*f2a8e57eSGunnar Mills                    ],
79*f2a8e57eSGunnar Mills                    "description": "Indicates the type of permission.",
80*f2a8e57eSGunnar Mills                    "longDescription": "This property shall indicate the type of permission.",
81*f2a8e57eSGunnar Mills                    "readonly": false
82*f2a8e57eSGunnar Mills                },
83*f2a8e57eSGunnar Mills                "Description": {
84*f2a8e57eSGunnar Mills                    "anyOf": [
85*f2a8e57eSGunnar Mills                        {
86*f2a8e57eSGunnar Mills                            "$ref": "http://redfish.dmtf.org/schemas/v1/Resource.json#/definitions/Description"
87*f2a8e57eSGunnar Mills                        },
88*f2a8e57eSGunnar Mills                        {
89*f2a8e57eSGunnar Mills                            "type": "null"
90*f2a8e57eSGunnar Mills                        }
91*f2a8e57eSGunnar Mills                    ],
92*f2a8e57eSGunnar Mills                    "readonly": true
93*f2a8e57eSGunnar Mills                },
94*f2a8e57eSGunnar Mills                "DestinationPortLower": {
95*f2a8e57eSGunnar Mills                    "description": "The TCP, UDP, or other destination port to which this rule begins application, inclusive.",
96*f2a8e57eSGunnar Mills                    "longDescription": "This property shall contain the TCP, UDP, or other destination port to which this rule begins application, inclusive.",
97*f2a8e57eSGunnar Mills                    "readonly": false,
98*f2a8e57eSGunnar Mills                    "type": [
99*f2a8e57eSGunnar Mills                        "integer",
100*f2a8e57eSGunnar Mills                        "null"
101*f2a8e57eSGunnar Mills                    ]
102*f2a8e57eSGunnar Mills                },
103*f2a8e57eSGunnar Mills                "DestinationPortUpper": {
104*f2a8e57eSGunnar Mills                    "description": "The TCP, UDP, or other destination port to which this rule ends application, inclusive.",
105*f2a8e57eSGunnar Mills                    "longDescription": "This property shall contain the TCP, UDP, or other destination port to which this rule ends application, inclusive.",
106*f2a8e57eSGunnar Mills                    "readonly": false,
107*f2a8e57eSGunnar Mills                    "type": [
108*f2a8e57eSGunnar Mills                        "integer",
109*f2a8e57eSGunnar Mills                        "null"
110*f2a8e57eSGunnar Mills                    ]
111*f2a8e57eSGunnar Mills                },
112*f2a8e57eSGunnar Mills                "Direction": {
113*f2a8e57eSGunnar Mills                    "anyOf": [
114*f2a8e57eSGunnar Mills                        {
115*f2a8e57eSGunnar Mills                            "$ref": "#/definitions/DataDirection"
116*f2a8e57eSGunnar Mills                        },
117*f2a8e57eSGunnar Mills                        {
118*f2a8e57eSGunnar Mills                            "type": "null"
119*f2a8e57eSGunnar Mills                        }
120*f2a8e57eSGunnar Mills                    ],
121*f2a8e57eSGunnar Mills                    "description": "Indicates the direction of the data to which this permission applies.",
122*f2a8e57eSGunnar Mills                    "longDescription": "This value shall indicate the direction of the data to which this permission applies for this network device function.",
123*f2a8e57eSGunnar Mills                    "readonly": false
124*f2a8e57eSGunnar Mills                },
125*f2a8e57eSGunnar Mills                "IANAProtocolNumber": {
126*f2a8e57eSGunnar Mills                    "description": "The IANA protocol number to which this permission applies.  For TCP, this is `6`.  For UDP, this is `17`.",
127*f2a8e57eSGunnar Mills                    "longDescription": "This property shall contain the IANA protocol number to which this permission applies.",
128*f2a8e57eSGunnar Mills                    "readonly": false,
129*f2a8e57eSGunnar Mills                    "type": [
130*f2a8e57eSGunnar Mills                        "integer",
131*f2a8e57eSGunnar Mills                        "null"
132*f2a8e57eSGunnar Mills                    ]
133*f2a8e57eSGunnar Mills                },
134*f2a8e57eSGunnar Mills                "IPAddressLower": {
135*f2a8e57eSGunnar Mills                    "description": "The lower IP address to which this permission applies.",
136*f2a8e57eSGunnar Mills                    "longDescription": "This property shall contain the lower IP address to which this permission applies.",
137*f2a8e57eSGunnar Mills                    "readonly": false,
138*f2a8e57eSGunnar Mills                    "type": [
139*f2a8e57eSGunnar Mills                        "string",
140*f2a8e57eSGunnar Mills                        "null"
141*f2a8e57eSGunnar Mills                    ]
142*f2a8e57eSGunnar Mills                },
143*f2a8e57eSGunnar Mills                "IPAddressType": {
144*f2a8e57eSGunnar Mills                    "anyOf": [
145*f2a8e57eSGunnar Mills                        {
146*f2a8e57eSGunnar Mills                            "$ref": "#/definitions/IPAddressType"
147*f2a8e57eSGunnar Mills                        },
148*f2a8e57eSGunnar Mills                        {
149*f2a8e57eSGunnar Mills                            "type": "null"
150*f2a8e57eSGunnar Mills                        }
151*f2a8e57eSGunnar Mills                    ],
152*f2a8e57eSGunnar Mills                    "description": "The type of IP address populated in the `IPAddressLower` and `IPAddressUpper` properties.",
153*f2a8e57eSGunnar Mills                    "longDescription": "This property shall contain the type of IP address populated in the `IPAddressLower` and `IPAddressUpper` properties.  Services shall not permit mixing IPv6 and IPv4 addresses on the same resource.",
154*f2a8e57eSGunnar Mills                    "readonly": false
155*f2a8e57eSGunnar Mills                },
156*f2a8e57eSGunnar Mills                "IPAddressUpper": {
157*f2a8e57eSGunnar Mills                    "description": "The upper IP address to which this permission applies.",
158*f2a8e57eSGunnar Mills                    "longDescription": "This property shall contain the upper IP address to which this permission applies.",
159*f2a8e57eSGunnar Mills                    "readonly": false,
160*f2a8e57eSGunnar Mills                    "type": [
161*f2a8e57eSGunnar Mills                        "string",
162*f2a8e57eSGunnar Mills                        "null"
163*f2a8e57eSGunnar Mills                    ]
164*f2a8e57eSGunnar Mills                },
165*f2a8e57eSGunnar Mills                "Id": {
166*f2a8e57eSGunnar Mills                    "$ref": "http://redfish.dmtf.org/schemas/v1/Resource.json#/definitions/Id",
167*f2a8e57eSGunnar Mills                    "readonly": true
168*f2a8e57eSGunnar Mills                },
169*f2a8e57eSGunnar Mills                "Name": {
170*f2a8e57eSGunnar Mills                    "$ref": "http://redfish.dmtf.org/schemas/v1/Resource.json#/definitions/Name",
171*f2a8e57eSGunnar Mills                    "readonly": true
172*f2a8e57eSGunnar Mills                },
173*f2a8e57eSGunnar Mills                "Oem": {
174*f2a8e57eSGunnar Mills                    "$ref": "http://redfish.dmtf.org/schemas/v1/Resource.json#/definitions/Oem",
175*f2a8e57eSGunnar Mills                    "description": "The OEM extension property.",
176*f2a8e57eSGunnar Mills                    "longDescription": "This property shall contain the OEM extensions.  All values for properties that this object contains shall conform to the Redfish Specification-described requirements."
177*f2a8e57eSGunnar Mills                },
178*f2a8e57eSGunnar Mills                "SourcePortLower": {
179*f2a8e57eSGunnar Mills                    "description": "The TCP, UDP, or other source port to which this rule begins application, inclusive.",
180*f2a8e57eSGunnar Mills                    "longDescription": "This property shall contain the TCP, UDP, or other source port to which this rule begins application, inclusive.",
181*f2a8e57eSGunnar Mills                    "readonly": false,
182*f2a8e57eSGunnar Mills                    "type": [
183*f2a8e57eSGunnar Mills                        "integer",
184*f2a8e57eSGunnar Mills                        "null"
185*f2a8e57eSGunnar Mills                    ]
186*f2a8e57eSGunnar Mills                },
187*f2a8e57eSGunnar Mills                "SourcePortUpper": {
188*f2a8e57eSGunnar Mills                    "description": "The TCP, UDP or other source port to which this rule ends application, inclusive.",
189*f2a8e57eSGunnar Mills                    "longDescription": "This property shall contain the TCP, UDP, or other source port to which this rule ends application, inclusive.",
190*f2a8e57eSGunnar Mills                    "readonly": false,
191*f2a8e57eSGunnar Mills                    "type": [
192*f2a8e57eSGunnar Mills                        "integer",
193*f2a8e57eSGunnar Mills                        "null"
194*f2a8e57eSGunnar Mills                    ]
195*f2a8e57eSGunnar Mills                },
196*f2a8e57eSGunnar Mills                "StatefulSession": {
197*f2a8e57eSGunnar Mills                    "description": "Indicates if this is a permission that only applies to stateful connections.",
198*f2a8e57eSGunnar Mills                    "longDescription": "This property shall indicate if this permission only applies to stateful connections, which are those using SYN, ACK, and FIN.",
199*f2a8e57eSGunnar Mills                    "readonly": false,
200*f2a8e57eSGunnar Mills                    "type": [
201*f2a8e57eSGunnar Mills                        "boolean",
202*f2a8e57eSGunnar Mills                        "null"
203*f2a8e57eSGunnar Mills                    ]
204*f2a8e57eSGunnar Mills                }
205*f2a8e57eSGunnar Mills            },
206*f2a8e57eSGunnar Mills            "required": [
207*f2a8e57eSGunnar Mills                "@odata.id",
208*f2a8e57eSGunnar Mills                "@odata.type",
209*f2a8e57eSGunnar Mills                "Id",
210*f2a8e57eSGunnar Mills                "Name"
211*f2a8e57eSGunnar Mills            ],
212*f2a8e57eSGunnar Mills            "type": "object"
213*f2a8e57eSGunnar Mills        },
214*f2a8e57eSGunnar Mills        "AllowType": {
215*f2a8e57eSGunnar Mills            "enum": [
216*f2a8e57eSGunnar Mills                "Allow",
217*f2a8e57eSGunnar Mills                "Deny"
218*f2a8e57eSGunnar Mills            ],
219*f2a8e57eSGunnar Mills            "enumDescriptions": {
220*f2a8e57eSGunnar Mills                "Allow": "Indicates that traffic that matches the criteria in this resource is permitted.",
221*f2a8e57eSGunnar Mills                "Deny": "Indicates that traffic that matches the criteria in this resource is not permitted."
222*f2a8e57eSGunnar Mills            },
223*f2a8e57eSGunnar Mills            "type": "string"
224*f2a8e57eSGunnar Mills        },
225*f2a8e57eSGunnar Mills        "DataDirection": {
226*f2a8e57eSGunnar Mills            "enum": [
227*f2a8e57eSGunnar Mills                "Ingress",
228*f2a8e57eSGunnar Mills                "Egress"
229*f2a8e57eSGunnar Mills            ],
230*f2a8e57eSGunnar Mills            "enumDescriptions": {
231*f2a8e57eSGunnar Mills                "Egress": "Indicates that this limit is enforced on packets and bytes transmitted by the network device function.",
232*f2a8e57eSGunnar Mills                "Ingress": "Indicates that this limit is enforced on packets and bytes received by the network device function."
233*f2a8e57eSGunnar Mills            },
234*f2a8e57eSGunnar Mills            "type": "string"
235*f2a8e57eSGunnar Mills        },
236*f2a8e57eSGunnar Mills        "IPAddressType": {
237*f2a8e57eSGunnar Mills            "enum": [
238*f2a8e57eSGunnar Mills                "IPv4",
239*f2a8e57eSGunnar Mills                "IPv6"
240*f2a8e57eSGunnar Mills            ],
241*f2a8e57eSGunnar Mills            "enumDescriptions": {
242*f2a8e57eSGunnar Mills                "IPv4": "IPv4 addressing is used for all IP-fields in this object.",
243*f2a8e57eSGunnar Mills                "IPv6": "IPv6 addressing is used for all IP-fields in this object."
244*f2a8e57eSGunnar Mills            },
245*f2a8e57eSGunnar Mills            "type": "string"
246*f2a8e57eSGunnar Mills        },
247*f2a8e57eSGunnar Mills        "OemActions": {
248*f2a8e57eSGunnar Mills            "additionalProperties": true,
249*f2a8e57eSGunnar Mills            "description": "The available OEM-specific actions for this resource.",
250*f2a8e57eSGunnar Mills            "longDescription": "This type shall contain the available OEM-specific actions for this resource.",
251*f2a8e57eSGunnar Mills            "patternProperties": {
252*f2a8e57eSGunnar Mills                "^([a-zA-Z_][a-zA-Z0-9_]*)?@(odata|Redfish|Message)\\.[a-zA-Z_][a-zA-Z0-9_]*$": {
253*f2a8e57eSGunnar Mills                    "description": "This property shall specify a valid odata or Redfish property.",
254*f2a8e57eSGunnar Mills                    "type": [
255*f2a8e57eSGunnar Mills                        "array",
256*f2a8e57eSGunnar Mills                        "boolean",
257*f2a8e57eSGunnar Mills                        "integer",
258*f2a8e57eSGunnar Mills                        "number",
259*f2a8e57eSGunnar Mills                        "null",
260*f2a8e57eSGunnar Mills                        "object",
261*f2a8e57eSGunnar Mills                        "string"
262*f2a8e57eSGunnar Mills                    ]
263*f2a8e57eSGunnar Mills                }
264*f2a8e57eSGunnar Mills            },
265*f2a8e57eSGunnar Mills            "properties": {},
266*f2a8e57eSGunnar Mills            "type": "object"
267*f2a8e57eSGunnar Mills        }
268*f2a8e57eSGunnar Mills    },
269*f2a8e57eSGunnar Mills    "language": "en",
270*f2a8e57eSGunnar Mills    "owningEntity": "DMTF",
271*f2a8e57eSGunnar Mills    "release": "2021.2",
272*f2a8e57eSGunnar Mills    "title": "#AllowDeny.v1_0_3.AllowDeny"
273*f2a8e57eSGunnar Mills}