diff --git a/docs/auth_rules.md b/docs/auth_rules.md index d06b87e11..0e162f58d 100644 --- a/docs/auth_rules.md +++ b/docs/auth_rules.md @@ -10,217 +10,217 @@ NYM - `role` - `` + role + <empty> TRUSTEE TRUSTEE Adding new TRUSTEE NYM - `role` - `` + role + <empty> STEWARD TRUSTEE Adding new STEWARD NYM - `role` - `` + role + <empty> TRUST_ANCHOR TRUSTEE, STEWARD Adding new TRUST_ANCHOR NYM - `role` - `` + role + <empty> NETWORK_MONITOR TRUSTEE, STEWARD Adding new NETWORK_MONITOR NYM - `role` - `` - `` + role + <empty> + <empty> TRUSTEE, STEWARD, TRUST_ANCHOR Adding new Identity Owner NYM - `role` + role TRUSTEE - `` + <empty> TRUSTEE Blacklisting Trustee NYM - `role` + role STEWARD - `` + <empty> TRUSTEE Blacklisting Steward NYM - `role` + role TRUST_ANCHOR - `` + <empty> TRUSTEE Blacklisting Trust anchor NYM - `role` + role NETWORK_MONITOR - `` + <empty> TRUSTEE, STEWARD Blacklisting user with NETWORK_MONITOR role NYM - `verkey` - `*` - `*` + verkey + * + * Owner of this nym Key Rotation SCHEMA - `*` - `*` - `*` + * + * + * TRUSTEE, STEWARD, TRUST_ANCHOR Adding new Schema SCHEMA - `*` - `*` - `*` + * + * + * No one can edit existing Schema Editing Schema CLAIM_DEF - `*` - `*` - `*` + * + * + * TRUSTEE, STEWARD, TRUST_ANCHOR Adding new CLAIM_DEF transaction CLAIM_DEF - `*` - `*` - `*` + * + * + * Owner of claim_def txn Editing CLAIM_DEF transaction NODE - `services` - `` - `[VALIDATOR]` + services + <empty> + [VALIDATOR] STEWARD if it doesn't own NODE transaction yet Adding new node to pool NODE - `services` - `[VALIDATOR]` - `[]` + services + [VALIDATOR] + [] TRUSTEE, STEWARD if it is owner of this transaction Demotion of node NODE - `services` - `[]` - `[VALIDATOR]` + services + [] + [VALIDATOR] TRUSTEE, STEWARD if it is owner of this transaction Promotion of node NODE - `node_ip` - `*` - `*` + node_ip + * + * STEWARD if it is owner of this transaction Changing Node's ip address NODE - `node_port` - `*` - `*` + node_port + * + * STEWARD if it is owner of this transaction Changing Node's port NODE - `client_ip` - `*` - `*` + client_ip + * + * STEWARD if it is owner of this transaction Changing Client's ip address NODE - `client_port` - `*` - `*` + client_port + * + * STEWARD if it is owner of this transaction Changing Client's port NODE - `blskey` - `*` - `*` + blskey + * + * STEWARD if it is owner of this transaction Changing Node's blskey POOL_UPGRADE - `action` - `` - `start` + action + <empty> + start TRUSTEE Starting upgrade procedure POOL_UPGRADE - `action` - `start` - `cancel` + action + start + cancel TRUSTEE Canceling upgrade procedure POOL_RESTART - `action` - `*` - `*` + action + * + * TRUSTEE Restarting pool command POOL_CONFIG - `action` - `*` - `*` + action + * + * TRUSTEE - Pool config command (like a `read only` option) + Pool config command (like a read only option) VALIDATOR_INFO - `*` - `*` - `*` + * + * + * TRUSTEE, STEWARD, NETWORK_MONITOR Getting validator_info from pool @@ -235,31 +235,31 @@ New value Who can Description - <\/tr> + NYM - `role` - `` - `` + role + <empty> + <empty> Anyone Adding new nym - <\/tr> + SCHEMA - `*` - `*` - `*` + * + * + * Anyone Any operations with SCHEMA transaction - <\/tr> + CLAIM_DEF - `*` - `*` - `*` + * + * + * Anyone Any operations with CLAIM_DEF transaction - <\/tr> + @@ -273,39 +273,39 @@ New value Who can Description - <\/tr> + REVOC_REG_DEF - `*` - `*` - `*` + * + * + * TRUSTEE, STEWARD, TRUST_ANCHOR Adding new REVOC_REG_DEF - <\/tr> + REVOC_REG_DEF - `*` - `*` - `*` + * + * + * Only owners can edit existing REVOC_REG_DEF Editing REVOC_REG_DEF - <\/tr> + REVOC_REG_ENTRY - `*` - `*` - `*` + * + * + * Only the owner of the corresponding REVOC_REG_DEF can create new REVOC_REG_ENTRY Adding new REVOC_REG_ENTRY - <\/tr> + REVOC_REG_ENTRY - `*` - `*` - `*` + * + * + * Only owners can edit existing REVOC_REG_ENTRY Editing REVOC_REG_ENTRY - <\/tr> + @@ -318,37 +318,37 @@ New value Who can Description - <\/tr> + REVOC_REG_DEF - `*` - `*` - `*` + * + * + * Anyone can create new REVOC_REG_DEF Adding new REVOC_REG_DEF - <\/tr> + REVOC_REG_DEF - `*` - `*` - `*` + * + * + * Only owners can edit existing REVOC_REG_DEF Editing REVOC_REG_DEF - <\/tr> + REVOC_REG_ENTRY - `*` - `*` - `*` + * + * + * Only the owner of the corresponding REVOC_REG_DEF can create new REVOC_REG_ENTRY Adding new REVOC_REG_ENTRY - <\/tr> + REVOC_REG_ENTRY - `*` - `*` - `*` + * + * + * Only owners can edit existing REVOC_REG_ENTRY Adding new REVOC_REG_ENTRY - <\/tr> +