Modify scope keys

revert
Viranga Gunarathna 1 year ago
parent 69efff10bd
commit 48a72e80e9

@ -58,7 +58,7 @@ import javax.ws.rs.core.UriInfo;
@Scope( @Scope(
name = "Using Grafana APIs required for Grafana iframes", name = "Using Grafana APIs required for Grafana iframes",
description = "Grafana API proxy to validate requests.", description = "Grafana API proxy to validate requests.",
key = "perm:grafana:api:view", key = "grafana:api:view",
roles = {"Internal/grafanamgt-user"}, roles = {"Internal/grafanamgt-user"},
permissions = {"/analytics-mgt/grafana-mgt/api/view"} permissions = {"/analytics-mgt/grafana-mgt/api/view"}
) )
@ -84,7 +84,7 @@ public interface GrafanaAPIProxyService {
tags = "Analytics", tags = "Analytics",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = SCOPE, value = "perm:grafana:api:view") @ExtensionProperty(name = SCOPE, value = "grafana:api:view")
}) })
} }
) )
@ -101,7 +101,7 @@ public interface GrafanaAPIProxyService {
tags = "Analytics", tags = "Analytics",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = SCOPE, value = "perm:grafana:api:view") @ExtensionProperty(name = SCOPE, value = "grafana:api:view")
}) })
} }
) )
@ -117,7 +117,7 @@ public interface GrafanaAPIProxyService {
tags = "Analytics", tags = "Analytics",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = SCOPE, value = "perm:grafana:api:view") @ExtensionProperty(name = SCOPE, value = "grafana:api:view")
}) })
} }
) )
@ -134,7 +134,7 @@ public interface GrafanaAPIProxyService {
tags = "Analytics", tags = "Analytics",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = SCOPE, value = "perm:grafana:api:view") @ExtensionProperty(name = SCOPE, value = "grafana:api:view")
}) })
} }
) )
@ -150,7 +150,7 @@ public interface GrafanaAPIProxyService {
tags = "Analytics", tags = "Analytics",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = SCOPE, value = "perm:grafana:api:view") @ExtensionProperty(name = SCOPE, value = "grafana:api:view")
}) })
} }
) )

@ -86,7 +86,7 @@ public class AnnotationProcessor {
private static final String ANNOTATIONS_SCOPES = "scopes"; private static final String ANNOTATIONS_SCOPES = "scopes";
private static final String ANNOTATIONS_SCOPE = "scope"; private static final String ANNOTATIONS_SCOPE = "scope";
private static final String DEFAULT_SCOPE_NAME = "default admin scope"; private static final String DEFAULT_SCOPE_NAME = "default admin scope";
private static final String DEFAULT_SCOPE_KEY = "perm:admin"; private static final String DEFAULT_SCOPE_KEY = "dm:admin";
private static final String DEFAULT_SCOPE_PERMISSION = "/permision/device-mgt"; private static final String DEFAULT_SCOPE_PERMISSION = "/permision/device-mgt";
private static final String DEFAULT_SCOPE_ROLE = "admin"; private static final String DEFAULT_SCOPE_ROLE = "admin";

@ -37,7 +37,7 @@ public class TestUtils {
template.setResourceURI("https://localhost:9443/api/device-mgt/windows/v1.0/admin/devices/reboot"); template.setResourceURI("https://localhost:9443/api/device-mgt/windows/v1.0/admin/devices/reboot");
template.setUriTemplate(uriTemplate); template.setUriTemplate(uriTemplate);
ApiScope scope = new ApiScope(); ApiScope scope = new ApiScope();
scope.setKey("perm:windows:reboot"); scope.setKey("win:ops:reboot");
scope.setName("Reboot"); scope.setName("Reboot");
scope.setRoles("/permission/admin/device-mgt/devices/owning-device/operations/windows/reboot"); scope.setRoles("/permission/admin/device-mgt/devices/owning-device/operations/windows/reboot");
scope.setDescription("Lock reset on Windows devices"); scope.setDescription("Lock reset on Windows devices");

@ -58,7 +58,7 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "Sign CSR", name = "Sign CSR",
description = "Sign CSR", description = "Sign CSR",
key = "perm:sign-csr", key = "dm:sign-csr",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/certificates/manage"} permissions = {"/device-mgt/certificates/manage"}
) )
@ -87,7 +87,7 @@ public interface CertificateMgtService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = SCOPE, value = "perm:sign-csr") @ExtensionProperty(name = SCOPE, value = "dm:sign-csr")
}) })
} }
) )

@ -62,35 +62,35 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "Adding a new SSL certificate", name = "Adding a new SSL certificate",
description = "Adding a new SSL certificate", description = "Adding a new SSL certificate",
key = "perm:admin:certificates:add", key = "cm:cert:add",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/admin/certificates/add"} permissions = {"/device-mgt/admin/certificates/add"}
), ),
@Scope( @Scope(
name = "Getting Details of an SSL Certificate", name = "Getting Details of an SSL Certificate",
description = "Getting Details of an SSL Certificate", description = "Getting Details of an SSL Certificate",
key = "perm:admin:certificates:details", key = "cm:cert:details:get",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/admin/certificates/details"} permissions = {"/device-mgt/admin/certificates/details"}
), ),
@Scope( @Scope(
name = "Getting Details of Certificates", name = "Getting Details of Certificates",
description = "Getting Details of Certificates", description = "Getting Details of Certificates",
key = "perm:admin:certificates:view", key = "cm:cert:view",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/admin/certificates/view"} permissions = {"/device-mgt/admin/certificates/view"}
), ),
@Scope( @Scope(
name = "Deleting an SSL Certificate", name = "Deleting an SSL Certificate",
description = "Deleting an SSL Certificate", description = "Deleting an SSL Certificate",
key = "perm:admin:certificates:delete", key = "cm:cert:delete",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/admin/certificates/delete"} permissions = {"/device-mgt/admin/certificates/delete"}
), ),
@Scope( @Scope(
name = "Verify SSL certificate", name = "Verify SSL certificate",
description = "Verify SSL certificate", description = "Verify SSL certificate",
key = "perm:admin:certificates:verify", key = "cm:cert:verify",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/admin/certificates/verify"} permissions = {"/device-mgt/admin/certificates/verify"}
) )
@ -119,7 +119,7 @@ public interface CertificateManagementAdminService {
tags = "Certificate Management", tags = "Certificate Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = SCOPE, value = "perm:admin:certificates:add") @ExtensionProperty(name = SCOPE, value = "cm:cert:add")
}) })
} }
) )
@ -188,7 +188,7 @@ public interface CertificateManagementAdminService {
tags = "Certificate Management", tags = "Certificate Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = SCOPE, value = "perm:admin:certificates:details") @ExtensionProperty(name = SCOPE, value = "cm:cert:details:get")
}) })
} }
) )
@ -260,7 +260,7 @@ public interface CertificateManagementAdminService {
tags = "Certificate Management", tags = "Certificate Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = SCOPE, value = "perm:admin:certificates:view") @ExtensionProperty(name = SCOPE, value = "cm:cert:view")
}) })
} }
) )
@ -353,7 +353,7 @@ public interface CertificateManagementAdminService {
tags = "Certificate Management", tags = "Certificate Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = SCOPE, value = "perm:admin:certificates:delete") @ExtensionProperty(name = SCOPE, value = "cm:cert:delete")
}) })
} }
) )
@ -399,7 +399,7 @@ public interface CertificateManagementAdminService {
tags = "Certificate Management", tags = "Certificate Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = SCOPE, value = "perm:admin:certificates:verify") @ExtensionProperty(name = SCOPE, value = "cm:cert:verify")
}) })
} }
) )

@ -76,7 +76,7 @@ import java.util.List;
@Scope( @Scope(
name = "Get activities", name = "Get activities",
description = "Get activities", description = "Get activities",
key = "perm:get-activity", key = "dm:activity:get",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/view"} permissions = {"/device-mgt/devices/owning-device/view"}
) )
@ -97,7 +97,7 @@ public interface ActivityInfoProviderService {
tags = "Activity Info Provider", tags = "Activity Info Provider",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:get-activity") @ExtensionProperty(name = Constants.SCOPE, value = "dm:activity:get")
}) })
} }
) )
@ -171,7 +171,7 @@ public interface ActivityInfoProviderService {
tags = "Activity Info Provider", tags = "Activity Info Provider",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:get-activity") @ExtensionProperty(name = Constants.SCOPE, value = "dm:activity:get")
}) })
}, },
nickname = "getActivitiesByActivityIdList" nickname = "getActivitiesByActivityIdList"
@ -234,7 +234,7 @@ public interface ActivityInfoProviderService {
tags = "Activity Info Provider", tags = "Activity Info Provider",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:get-activity") @ExtensionProperty(name = Constants.SCOPE, value = "dm:activity:get")
}) })
} }
) )
@ -331,7 +331,7 @@ public interface ActivityInfoProviderService {
tags = "Activity Info Provider", tags = "Activity Info Provider",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:get-activity") @ExtensionProperty(name = Constants.SCOPE, value = "dm:activity:get")
}) })
}, },
nickname = "getActivitiesByOperationCode" nickname = "getActivitiesByOperationCode"
@ -395,7 +395,7 @@ public interface ActivityInfoProviderService {
tags = "Activity Info Provider", tags = "Activity Info Provider",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:get-activity") @ExtensionProperty(name = Constants.SCOPE, value = "dm:activity:get")
}) })
}, },
nickname = "getActivitiesWithFilters" nickname = "getActivitiesWithFilters"

@ -67,49 +67,49 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "Create Event Stream Artifact", name = "Create Event Stream Artifact",
description = "Create Event Stream Artifact", description = "Create Event Stream Artifact",
key = "perm:analytics:artifacts:stream", key = "dm:an:artifacts:stream:add",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/analytics/artifacts/stream/add"}), permissions = {"/device-mgt/analytics/artifacts/stream/add"}),
@Scope( @Scope(
name = "Delete Stream Artifact", name = "Delete Stream Artifact",
description = "Delete Stream Artifact", description = "Delete Stream Artifact",
key = "perm:analytics:artifacts:stream:delete", key = "dm:an:artifacts:stream:delete",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/analytics/artifacts/stream/delete"}), permissions = {"/device-mgt/analytics/artifacts/stream/delete"}),
@Scope( @Scope(
name = "Create Event Receiver Artifact", name = "Create Event Receiver Artifact",
description = "Create Event Receiver Artifact", description = "Create Event Receiver Artifact",
key = "perm:analytics:artifacts:receiver", key = "dm:an:artifacts:rcv:add",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/analytics/artifacts/receiver/add"}), permissions = {"/device-mgt/analytics/artifacts/receiver/add"}),
@Scope( @Scope(
name = "Delete Receiver Artifact", name = "Delete Receiver Artifact",
description = "Delete Receiver Artifact", description = "Delete Receiver Artifact",
key = "perm:analytics:artifacts:receiver:delete", key = "dm:an:artifacts:rcv:delete",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/analytics/artifacts/receiver/delete"}), permissions = {"/device-mgt/analytics/artifacts/receiver/delete"}),
@Scope( @Scope(
name = "Create Event Publisher Artifact", name = "Create Event Publisher Artifact",
description = "Create Event Publisher Artifact", description = "Create Event Publisher Artifact",
key = "perm:analytics:artifacts:publisher", key = "dm:an:artifacts:pub:add",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/analytics/artifacts/publisher/add"}), permissions = {"/device-mgt/analytics/artifacts/publisher/add"}),
@Scope( @Scope(
name = "Delete Publisher Artifact", name = "Delete Publisher Artifact",
description = "Delete Publisher Artifact", description = "Delete Publisher Artifact",
key = "perm:analytics:artifacts:publisher:delete", key = "dm:an:artifacts:pub:delete",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/analytics/artifacts/publisher/delete"}), permissions = {"/device-mgt/analytics/artifacts/publisher/delete"}),
@Scope( @Scope(
name = "Create Siddhi Script Artifact", name = "Create Siddhi Script Artifact",
description = "Create Siddhi Script Artifact", description = "Create Siddhi Script Artifact",
key = "perm:analytics:artifacts:siddhi", key = "dm:an:artifacts:siddhi:add",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/analytics/artifacts/siddhi-script/add"}), permissions = {"/device-mgt/analytics/artifacts/siddhi-script/add"}),
@Scope( @Scope(
name = "Delete Siddhi Script Artifact", name = "Delete Siddhi Script Artifact",
description = "Delete Siddhi Script Artifact", description = "Delete Siddhi Script Artifact",
key = "perm:analytics:artifacts:siddhi:delete", key = "dm:an:artifacts:siddhi:delete",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/analytics/artifacts/siddhi-script/delete"}) permissions = {"/device-mgt/analytics/artifacts/siddhi-script/delete"})
} }
@ -134,7 +134,7 @@ public interface AnalyticsArtifactsManagementService {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty( @ExtensionProperty(
name = Constants.SCOPE, name = Constants.SCOPE,
value = "perm:analytics:artifacts:stream" value = "dm:an:artifacts:stream:add"
)}) )})
} }
) )
@ -192,7 +192,7 @@ public interface AnalyticsArtifactsManagementService {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty( @ExtensionProperty(
name = Constants.SCOPE, name = Constants.SCOPE,
value = "perm:analytics:artifacts:stream" value = "dm:an:artifacts:stream:add"
)}) )})
} }
) )
@ -238,7 +238,7 @@ public interface AnalyticsArtifactsManagementService {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty( @ExtensionProperty(
name = Constants.SCOPE, name = Constants.SCOPE,
value = "perm:analytics:artifacts:stream:delete" value = "dm:an:artifacts:stream:delete"
)}) )})
} }
) )
@ -291,7 +291,7 @@ public interface AnalyticsArtifactsManagementService {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty( @ExtensionProperty(
name = Constants.SCOPE, name = Constants.SCOPE,
value = "perm:analytics:artifacts:receiver" value = "dm:an:artifacts:rcv:add"
)}) )})
} }
) )
@ -343,7 +343,7 @@ public interface AnalyticsArtifactsManagementService {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty( @ExtensionProperty(
name = Constants.SCOPE, name = Constants.SCOPE,
value = "perm:analytics:artifacts:receiver" value = "dm:an:artifacts:rcv:add"
)}) )})
} }
) )
@ -390,7 +390,7 @@ public interface AnalyticsArtifactsManagementService {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty( @ExtensionProperty(
name = Constants.SCOPE, name = Constants.SCOPE,
value = "perm:analytics:artifacts:receiver:delete" value = "dm:an:artifacts:rcv:delete"
)}) )})
} }
) )
@ -437,7 +437,7 @@ public interface AnalyticsArtifactsManagementService {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty( @ExtensionProperty(
name = Constants.SCOPE, name = Constants.SCOPE,
value = "perm:analytics:artifacts:publisher" value = "dm:an:artifacts:pub:add"
)}) )})
} }
) )
@ -489,7 +489,7 @@ public interface AnalyticsArtifactsManagementService {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty( @ExtensionProperty(
name = Constants.SCOPE, name = Constants.SCOPE,
value = "perm:analytics:artifacts:publisher" value = "dm:an:artifacts:pub:add"
)}) )})
} }
) )
@ -536,7 +536,7 @@ public interface AnalyticsArtifactsManagementService {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty( @ExtensionProperty(
name = Constants.SCOPE, name = Constants.SCOPE,
value = "perm:analytics:artifacts:publisher:delete" value = "dm:an:artifacts:pub:delete"
)}) )})
} }
) )
@ -580,7 +580,7 @@ public interface AnalyticsArtifactsManagementService {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty( @ExtensionProperty(
name = Constants.SCOPE, name = Constants.SCOPE,
value = "perm:analytics:artifacts:siddhi" value = "dm:an:artifacts:siddhi:add"
)}) )})
} }
) )
@ -631,7 +631,7 @@ public interface AnalyticsArtifactsManagementService {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty( @ExtensionProperty(
name = Constants.SCOPE, name = Constants.SCOPE,
value = "perm:analytics:artifacts:siddhi:delete" value = "dm:an:artifacts:siddhi:delete"
) )
}) })
} }

@ -67,14 +67,14 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "View configurations", name = "View configurations",
description = "", description = "",
key = "perm:view-configuration", key = "dm:conf:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/platform-configurations/view"} permissions = {"/device-mgt/platform-configurations/view"}
), ),
@Scope( @Scope(
name = "Manage configurations", name = "Manage configurations",
description = "", description = "",
key = "perm:manage-configuration", key = "dm:conf:manage",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/platform-configurations/manage"} permissions = {"/device-mgt/platform-configurations/manage"}
) )
@ -93,7 +93,7 @@ public interface ConfigurationManagementService {
tags = "Configuration Management", tags = "Configuration Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:view-configuration") @ExtensionProperty(name = Constants.SCOPE, value = "dm:conf:view")
}) })
} }
) )
@ -153,7 +153,7 @@ public interface ConfigurationManagementService {
tags = "Configuration Management", tags = "Configuration Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:manage-configuration") @ExtensionProperty(name = Constants.SCOPE, value = "dm:conf:manage")
}) })
} }
) )

@ -75,35 +75,35 @@ import java.util.Map;
@Scope( @Scope(
name = "Enroll Device", name = "Enroll Device",
description = "Register a device", description = "Register a device",
key = "perm:device:enroll", key = "dm:device:enroll",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/add"} permissions = {"/device-mgt/devices/owning-device/add"}
), ),
@Scope( @Scope(
name = "Modify Device", name = "Modify Device",
description = "Modify a device", description = "Modify a device",
key = "perm:device:modify", key = "dm:device:modify",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/modify"} permissions = {"/device-mgt/devices/owning-device/modify"}
), ),
@Scope( @Scope(
name = "Disenroll Device", name = "Disenroll Device",
description = "Disenroll a device", description = "Disenroll a device",
key = "perm:device:disenroll", key = "dm:device:disenroll",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/remove"} permissions = {"/device-mgt/devices/owning-device/remove"}
), ),
@Scope( @Scope(
name = "Publish Event", name = "Publish Event",
description = "publish device event", description = "publish device event",
key = "perm:device:publish-event", key = "dm:device:event:publish",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/event"} permissions = {"/device-mgt/devices/owning-device/event"}
), ),
@Scope( @Scope(
name = "Getting Device Operation Details", name = "Getting Device Operation Details",
description = "Getting Device Operation Details", description = "Getting Device Operation Details",
key = "perm:device:operations", key = "dm:ops:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/view"} permissions = {"/device-mgt/devices/owning-device/view"}
) )
@ -121,7 +121,7 @@ public interface DeviceAgentService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device:enroll") @ExtensionProperty(name = Constants.SCOPE, value = "dm:device:enroll")
}) })
} }
) )
@ -173,7 +173,7 @@ public interface DeviceAgentService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device:disenroll") @ExtensionProperty(name = Constants.SCOPE, value = "dm:device:disenroll")
}) })
} }
) )
@ -203,7 +203,7 @@ public interface DeviceAgentService {
tags = "Device Agent Management", tags = "Device Agent Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device:modify") @ExtensionProperty(name = Constants.SCOPE, value = "dm:device:modify")
}) })
} }
) )
@ -261,7 +261,7 @@ public interface DeviceAgentService {
tags = "Device Agent Management", tags = "Device Agent Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device:publish-event") @ExtensionProperty(name = Constants.SCOPE, value = "dm:device:event:publish")
}) })
}, },
nickname = "publishEventFromAgent" nickname = "publishEventFromAgent"
@ -327,7 +327,7 @@ public interface DeviceAgentService {
tags = "Device Agent Management", tags = "Device Agent Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device:publish-event") @ExtensionProperty(name = Constants.SCOPE, value = "dm:device:event:publish")
}) })
}, },
nickname = "publishEventsByTypeAndDevice" nickname = "publishEventsByTypeAndDevice"
@ -394,7 +394,7 @@ public interface DeviceAgentService {
tags = "Device Agent Management", tags = "Device Agent Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device:operations") @ExtensionProperty(name = Constants.SCOPE, value = "dm:ops:view")
}) })
} }
) )
@ -453,7 +453,7 @@ public interface DeviceAgentService {
tags = "Device Agent Management", tags = "Device Agent Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device:operations") @ExtensionProperty(name = Constants.SCOPE, value = "dm:ops:view")
}) })
} }
) )
@ -511,7 +511,7 @@ public interface DeviceAgentService {
tags = "Device Agent Management", tags = "Device Agent Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device:operations") @ExtensionProperty(name = Constants.SCOPE, value = "dm:ops:view")
}) })
} }
) )
@ -570,7 +570,7 @@ public interface DeviceAgentService {
tags = "Device Agent Management", tags = "Device Agent Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device:modify") @ExtensionProperty(name = Constants.SCOPE, value = "dm:device:modify")
}) })
} }
) )
@ -630,7 +630,7 @@ public interface DeviceAgentService {
tags = "Device Agent Management", tags = "Device Agent Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device:operations") @ExtensionProperty(name = Constants.SCOPE, value = "dm:ops:view")
}) })
} }
) )

@ -69,14 +69,14 @@ import java.util.List;
@Scope( @Scope(
name = "Add or Delete Event Definition for device type", name = "Add or Delete Event Definition for device type",
description = "Add or Delete Event Definition for device type", description = "Add or Delete Event Definition for device type",
key = "perm:device-types:events", key = "dm:device-type:event:modify",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/device-type/add"} permissions = {"/device-mgt/device-type/add"}
), ),
@Scope( @Scope(
name = "Get Events Details of a Device Type", name = "Get Events Details of a Device Type",
description = "Get Events Details of a Device Type", description = "Get Events Details of a Device Type",
key = "perm:device-types:events:view", key = "dm:device-type:event:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/view"} permissions = {"/device-mgt/devices/owning-device/view"}
) )
@ -98,7 +98,7 @@ public interface DeviceEventManagementService {
tags = "Device Event Management", tags = "Device Event Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device-types:events") @ExtensionProperty(name = Constants.SCOPE, value = "dm:device-type:event:modify")
}) })
} }
) )
@ -157,7 +157,7 @@ public interface DeviceEventManagementService {
tags = "Device Event Management", tags = "Device Event Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device-types:events") @ExtensionProperty(name = Constants.SCOPE, value = "dm:device-type:event:modify")
}) })
} }
) )
@ -209,7 +209,7 @@ public interface DeviceEventManagementService {
// tags = "Device Event Management", // tags = "Device Event Management",
// extensions = { // extensions = {
// @Extension(properties = { // @Extension(properties = {
// @ExtensionProperty(name = Constants.SCOPE, value = "perm:device-types:events:view") // @ExtensionProperty(name = Constants.SCOPE, value = "dm:device-type:event:view")
// }) // })
// } // }
// ) // )
@ -271,7 +271,7 @@ public interface DeviceEventManagementService {
// tags = "Device Event Management", // tags = "Device Event Management",
// extensions = { // extensions = {
// @Extension(properties = { // @Extension(properties = {
// @ExtensionProperty(name = Constants.SCOPE, value = "perm:device-types:events:view") // @ExtensionProperty(name = Constants.SCOPE, value = "dm:device-type:event:view")
// }) // })
// } // }
// ) // )
@ -327,7 +327,7 @@ public interface DeviceEventManagementService {
// tags = "Device Event Management", // tags = "Device Event Management",
// extensions = { // extensions = {
// @Extension(properties = { // @Extension(properties = {
// @ExtensionProperty(name = Constants.SCOPE, value = "perm:device-types:events:view") // @ExtensionProperty(name = Constants.SCOPE, value = "dm:device-type:event:view")
// }) // })
// } // }
// ) // )
@ -387,7 +387,7 @@ public interface DeviceEventManagementService {
tags = "Device Event Management", tags = "Device Event Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device-types:events:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:device-type:event:view")
}) })
} }
) )

@ -90,91 +90,91 @@ import java.util.Map;
@Scope( @Scope(
name = "Getting Details of Registered Devices", name = "Getting Details of Registered Devices",
description = "Getting Details of Registered Devices", description = "Getting Details of Registered Devices",
key = "perm:devices:view", key = "dm:devices:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/view"} permissions = {"/device-mgt/devices/owning-device/view"}
), ),
@Scope( @Scope(
name = "Getting Details of a Device", name = "Getting Details of a Device",
description = "Getting Details of a Device", description = "Getting Details of a Device",
key = "perm:devices:details", key = "dm:devices:details",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/view"} permissions = {"/device-mgt/devices/owning-device/view"}
), ),
@Scope( @Scope(
name = "Update the device specified by device id", name = "Update the device specified by device id",
description = "Update the device specified by device id", description = "Update the device specified by device id",
key = "perm:devices:update", key = "dm:devices:update",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/view"} permissions = {"/device-mgt/devices/owning-device/view"}
), ),
@Scope( @Scope(
name = "Delete the device specified by device id", name = "Delete the device specified by device id",
description = "Delete the device specified by device id", description = "Delete the device specified by device id",
key = "perm:devices:delete", key = "dm:devices:delete",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/view"} permissions = {"/device-mgt/devices/owning-device/view"}
), ),
@Scope( @Scope(
name = "Getting Feature Details of a Device", name = "Getting Feature Details of a Device",
description = "Getting Feature Details of a Device", description = "Getting Feature Details of a Device",
key = "perm:devices:features", key = "dm:devices:features:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/view"} permissions = {"/device-mgt/devices/owning-device/view"}
), ),
@Scope( @Scope(
name = "Advanced Search for Devices", name = "Advanced Search for Devices",
description = "Advanced Search for Devices", description = "Advanced Search for Devices",
key = "perm:devices:search", key = "dm:devices:search",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/view"} permissions = {"/device-mgt/devices/owning-device/view"}
), ),
@Scope( @Scope(
name = "Getting Installed Application Details of a Device", name = "Getting Installed Application Details of a Device",
description = "Getting Installed Application Details of a Device", description = "Getting Installed Application Details of a Device",
key = "perm:devices:applications", key = "dm:devices:app:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/view"} permissions = {"/device-mgt/devices/owning-device/view"}
), ),
@Scope( @Scope(
name = "Getting Device Operation Details", name = "Getting Device Operation Details",
description = "Getting Device Operation Details", description = "Getting Device Operation Details",
key = "perm:devices:operations", key = "dm:devices:ops:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/view"} permissions = {"/device-mgt/devices/owning-device/view"}
), ),
@Scope( @Scope(
name = "Get the details of the policy that is enforced on a device.", name = "Get the details of the policy that is enforced on a device.",
description = "Get the details of the policy that is enforced on a device.", description = "Get the details of the policy that is enforced on a device.",
key = "perm:devices:effective-policy", key = "dm:devices:policy:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/view"} permissions = {"/device-mgt/devices/owning-device/view"}
), ),
@Scope( @Scope(
name = "Getting Policy Compliance Details of a Device", name = "Getting Policy Compliance Details of a Device",
description = "Getting Policy Compliance Details of a Device", description = "Getting Policy Compliance Details of a Device",
key = "perm:devices:compliance-data", key = "dm:devices:compliance:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/view"} permissions = {"/device-mgt/devices/owning-device/view"}
), ),
@Scope( @Scope(
name = "Change device status.", name = "Change device status.",
description = "Change device status.", description = "Change device status.",
key = "perm:devices:change-status", key = "dm:devices:status:change",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/change-status"} permissions = {"/device-mgt/devices/change-status"}
), ),
@Scope( @Scope(
name = "Enroll Device", name = "Enroll Device",
description = "Register a device", description = "Register a device",
key = "perm:device:enroll", key = "dm:device:enroll",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/add"} permissions = {"/device-mgt/devices/owning-device/add"}
), ),
@Scope( @Scope(
name = "Viewing Enrollment Guide", name = "Viewing Enrollment Guide",
description = "Show enrollment guide to users", description = "Show enrollment guide to users",
key = "perm:devices:enrollment-guide:view", key = "dm:devices:enrollment-guide:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/enrollment-guide/view"} permissions = {"/device-mgt/devices/enrollment-guide/view"}
), ),
@ -195,7 +195,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:view")
}) })
} }
) )
@ -350,7 +350,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:view")
}) })
} }
) )
@ -426,7 +426,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:details") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:details")
}) })
} }
) )
@ -516,7 +516,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:details") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:details")
}) })
} }
) )
@ -604,7 +604,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:details") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:details")
}) })
} }
) )
@ -680,7 +680,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:details") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:details")
}) })
} }
) )
@ -758,7 +758,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:enrollment-guide:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:enrollment-guide:view")
}) })
} }
) )
@ -809,7 +809,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:details") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:details")
}) })
} }
) )
@ -856,7 +856,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:view")
}) })
}, },
nickname = "isEnrolledByType" nickname = "isEnrolledByType"
@ -913,7 +913,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:details") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:details")
}) })
} }
) )
@ -990,7 +990,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:details") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:details")
}) })
} }
) )
@ -1066,7 +1066,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:details") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:details")
}) })
} }
) )
@ -1146,7 +1146,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:update") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:update")
}) })
} }
) )
@ -1221,7 +1221,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:delete") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:delete")
}) })
}, },
nickname = "deleteDeviceByTypeAndId" nickname = "deleteDeviceByTypeAndId"
@ -1292,7 +1292,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:features") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:features:view")
}) })
} }
) )
@ -1374,7 +1374,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:search") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:search")
}) })
} }
) )
@ -1454,7 +1454,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:search") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:search")
}) })
} }
) )
@ -1532,7 +1532,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:applications") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:app:view")
}) })
} }
@ -1637,7 +1637,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:applications") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:app:view")
}) })
}) })
@ApiResponses( @ApiResponses(
@ -1701,7 +1701,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:operations") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:ops:view")
}) })
} }
) )
@ -1843,7 +1843,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:effective-policy") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:policy:view")
}) })
} }
) )
@ -1932,7 +1932,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:compliance-data") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:compliance:view")
}) })
} }
) )
@ -1979,7 +1979,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:view")
}) })
} }
) )
@ -2047,7 +2047,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:view")
}) })
} }
) )
@ -2117,7 +2117,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:change-status") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:status:change")
}) })
} }
) )
@ -2193,7 +2193,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:operations") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:ops:view")
}) })
} }
) )
@ -2250,7 +2250,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:view")
}) })
} }
) )
@ -2319,7 +2319,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:view")
}) })
} }
) )
@ -2389,7 +2389,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:change-status") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:status:change")
}) })
} }
) )
@ -2450,7 +2450,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:compliance-data") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:compliance:view")
}) })
} }
) )
@ -2518,7 +2518,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:compliance-data") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:compliance:view")
}) })
} }
) )
@ -2558,7 +2558,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:applications") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:app:view")
}) })
} }
) )
@ -2625,7 +2625,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:applications") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:app:view")
}) })
} }
) )
@ -2670,7 +2670,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:operations") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:ops:view")
}) })
} }
) )
@ -2722,7 +2722,7 @@ public interface DeviceManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:devices:view")
}) })
} }
) )
@ -2761,7 +2761,7 @@ public interface DeviceManagementService {
notes = "Getting the default access token by using given client ID and the client secret value.", notes = "Getting the default access token by using given client ID and the client secret value.",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device:enroll") @ExtensionProperty(name = Constants.SCOPE, value = "dm:device:enroll")
}) })
} }
) )

@ -68,28 +68,28 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "Getting the Supported Device Platforms", name = "Getting the Supported Device Platforms",
description = "Getting the Supported Device Platforms", description = "Getting the Supported Device Platforms",
key = "perm:device-types:types", key = "dm:device-type:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/device-type/view"} permissions = {"/device-mgt/device-type/view"}
), ),
@Scope( @Scope(
name = "Get Feature Details of a Device Type", name = "Get Feature Details of a Device Type",
description = "Get Feature Details of a Device Type", description = "Get Feature Details of a Device Type",
key = "perm:device-types:features", key = "dm:device-type:features:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/device-type/features/view"} permissions = {"/device-mgt/device-type/features/view"}
), ),
@Scope( @Scope(
name = "Get Config Details of a Device Type", name = "Get Config Details of a Device Type",
description = "Get Config Details of a Device Type", description = "Get Config Details of a Device Type",
key = "perm:device-types:configs", key = "dm:device-type:conf:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/device-type/config/view"} permissions = {"/device-mgt/device-type/config/view"}
), ),
@Scope( @Scope(
name = "Getting Details of Policies", name = "Getting Details of Policies",
description = "Getting Details of Policies", description = "Getting Details of Policies",
key = "perm:policies:get-details", key = "dm:device-type:policies:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/policies/view"} permissions = {"/device-mgt/policies/view"}
) )
@ -111,7 +111,7 @@ public interface DeviceTypeManagementService {
tags = "Device Type Management", tags = "Device Type Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device-types:types") @ExtensionProperty(name = Constants.SCOPE, value = "dm:device-type:view")
}) })
}, },
nickname = "getAllDeviceTypesPaginated" nickname = "getAllDeviceTypesPaginated"
@ -193,7 +193,7 @@ public interface DeviceTypeManagementService {
tags = "Device Type Management", tags = "Device Type Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device-types:types") @ExtensionProperty(name = Constants.SCOPE, value = "dm:device-type:view")
}) })
}, },
nickname = "getDeviceTypeByDeviceTypeName" nickname = "getDeviceTypeByDeviceTypeName"
@ -248,7 +248,7 @@ public interface DeviceTypeManagementService {
tags = "Device Type Management", tags = "Device Type Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device-types:features") @ExtensionProperty(name = Constants.SCOPE, value = "dm:device-type:features:view")
}) })
} }
) )
@ -327,7 +327,7 @@ public interface DeviceTypeManagementService {
tags = "Device Type Management", tags = "Device Type Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:device-types:configs") @ExtensionProperty(name = Constants.SCOPE, value = "dm:device-type:conf:view")
}) })
} }
) )

@ -72,21 +72,21 @@ import java.util.List;
@Scope( @Scope(
name = "View Analytics", name = "View Analytics",
description = "", description = "",
key = "perm:geo-service:analytics-view", key = "dm:geo:an:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/view-analytics"} permissions = {"/device-mgt/devices/owning-device/view-analytics"}
), ),
@Scope( @Scope(
name = "Manage Alerts", name = "Manage Alerts",
description = "", description = "",
key = "perm:geo-service:alerts-manage", key = "dm:geo:alerts:manage",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/manage-alerts"} permissions = {"/device-mgt/devices/owning-device/manage-alerts"}
), ),
@Scope( @Scope(
name = "Manage Geo Fences", name = "Manage Geo Fences",
description = "", description = "",
key = "perm:geo-service:geo-fence", key = "dm:geo:geo-fence:manage",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/manage-geo-fence"} permissions = {"/device-mgt/devices/owning-device/manage-geo-fence"}
) )
@ -111,7 +111,7 @@ public interface GeoLocationBasedService {
// tags = "Geo Service Management", // tags = "Geo Service Management",
// extensions = { // extensions = {
// @Extension(properties = { // @Extension(properties = {
// @ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:analytics-view") // @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:an:view")
// }) // })
// } // }
// ) // )
@ -180,7 +180,7 @@ public interface GeoLocationBasedService {
tags = "Geo Service Management", tags = "Geo Service Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:analytics-view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:an:view")
}) })
} }
) )
@ -264,7 +264,7 @@ public interface GeoLocationBasedService {
tags = "Geo Service Management", tags = "Geo Service Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:analytics-view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:an:view")
}) })
} }
) )
@ -381,7 +381,7 @@ public interface GeoLocationBasedService {
tags = "Geo Service Management", tags = "Geo Service Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:alerts-manage") @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:alerts:manage")
}) })
} }
) )
@ -447,7 +447,7 @@ public interface GeoLocationBasedService {
tags = "Geo Service Management", tags = "Geo Service Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:alerts-manage") @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:alerts:manage")
}) })
} }
) )
@ -500,7 +500,7 @@ public interface GeoLocationBasedService {
tags = "Geo Service Management", tags = "Geo Service Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:alerts-manage") @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:alerts:manage")
}) })
} }
) )
@ -565,7 +565,7 @@ public interface GeoLocationBasedService {
tags = "Geo Service Management", tags = "Geo Service Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:alerts-manage") @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:alerts:manage")
}) })
} }
) )
@ -618,7 +618,7 @@ public interface GeoLocationBasedService {
tags = "Geo Service Management", tags = "Geo Service Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:alerts-manage") @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:alerts:manage")
}) })
} }
) )
@ -682,7 +682,7 @@ public interface GeoLocationBasedService {
tags = "Geo Service Management", tags = "Geo Service Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:alerts-manage") @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:alerts:manage")
}) })
} }
) )
@ -735,7 +735,7 @@ public interface GeoLocationBasedService {
// tags = "Geo Service Management", // tags = "Geo Service Management",
// extensions = { // extensions = {
// @Extension(properties = { // @Extension(properties = {
// @ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:alerts-manage") // @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:alerts:manage")
// }) // })
// } // }
// ) // )
@ -804,7 +804,7 @@ public interface GeoLocationBasedService {
// tags = "Geo Service Management", // tags = "Geo Service Management",
// extensions = { // extensions = {
// @Extension(properties = { // @Extension(properties = {
// @ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:alerts-manage") // @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:alerts:manage")
// }) // })
// } // }
// ) // )
@ -863,7 +863,7 @@ public interface GeoLocationBasedService {
tags = "Geo Service Management", tags = "Geo Service Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:alerts-manage") @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:alerts:manage")
}) })
} }
) )
@ -928,7 +928,7 @@ public interface GeoLocationBasedService {
tags = "Geo Service Management", tags = "Geo Service Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:alerts-manage") @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:alerts:manage")
}) })
} }
) )
@ -978,7 +978,7 @@ public interface GeoLocationBasedService {
tags = "Geo Service Management", tags = "Geo Service Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:geo-fence") @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:geo-fence:manage")
}) })
} }
) )
@ -1020,7 +1020,7 @@ public interface GeoLocationBasedService {
tags = "Geo Service Management", tags = "Geo Service Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:geo-fence") @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:geo-fence:manage")
}) })
}, },
nickname = "getGeofenceByFenceId" nickname = "getGeofenceByFenceId"
@ -1071,7 +1071,7 @@ public interface GeoLocationBasedService {
tags = "Geo Service Management", tags = "Geo Service Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:geo-fence") @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:geo-fence:manage")
}) })
} }
) )
@ -1123,7 +1123,7 @@ public interface GeoLocationBasedService {
tags = "Geo Service Management", tags = "Geo Service Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:geo-fence") @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:geo-fence:manage")
}) })
} }
) )
@ -1169,7 +1169,7 @@ public interface GeoLocationBasedService {
tags = "Geo Service Management", tags = "Geo Service Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:geo-service:geo-fence") @ExtensionProperty(name = Constants.SCOPE, value = "dm:geo:geo-fence:manage")
}) })
} }
) )

@ -82,112 +82,105 @@ import java.util.List;
@Scope( @Scope(
name = "Get the list of groups belongs to current user.", name = "Get the list of groups belongs to current user.",
description = "Get the list of groups belongs to current user.", description = "Get the list of groups belongs to current user.",
key = "perm:groups:groups", key = "gm:groups:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/groups/view"} permissions = {"/device-mgt/groups/view"}
), ),
@Scope( @Scope(
name = "Get the count of groups belongs to current user.", name = "Get the count of groups belongs to current user.",
description = "Get the count of groups belongs to current user.", description = "Get the count of groups belongs to current user.",
key = "perm:groups:count", key = "gm:groups:count",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/groups/view"} permissions = {"/device-mgt/groups/view"}
), ),
@Scope( @Scope(
name = "Add new device group to the system.", name = "Add new device group to the system.",
description = "Add new device group to the system.", description = "Add new device group to the system.",
key = "perm:groups:add", key = "gm:groups:add",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/groups/add"} permissions = {"/device-mgt/groups/add"}
), ),
@Scope( @Scope(
name = "View group specified", name = "View group specified",
description = "View group specified", description = "View group specified",
key = "perm:groups:groups-view", key = "gm:groups:groups-view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/groups/view"} permissions = {"/device-mgt/groups/view"}
), ),
@Scope( @Scope(
name = "Update a group", name = "Update a group",
description = "Update a group", description = "Update a group",
key = "perm:groups:update", key = "gm:groups:update",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/groups/update"} permissions = {"/device-mgt/groups/update"}
), ),
@Scope( @Scope(
name = "Delete a group", name = "Delete a group",
description = "Delete a group", description = "Delete a group",
key = "perm:groups:remove", key = "gm:groups:remove",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/groups/remove"} permissions = {"/device-mgt/groups/remove"}
), ),
@Scope( @Scope(
name = "Manage group sharing with a user", name = "Manage group sharing with a user",
description = "Manage group sharing with a user", description = "Manage group sharing with a user",
key = "perm:groups:share", key = "gm:roles:share",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/groups/share"} permissions = {"/device-mgt/groups/share"}
), ),
@Scope( @Scope(
name = "View list of roles of a device group", name = "View list of roles of a device group",
description = "View list of roles of a device group", description = "View list of roles of a device group",
key = "perm:groups:roles", key = "gm:roles:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/groups/roles/view"} permissions = {"/device-mgt/groups/roles/view"}
), ),
@Scope( @Scope(
name = "View list of devices in the device group", name = "View list of devices in the device group",
description = "View list of devices in the device group", description = "View list of devices in the device group",
key = "perm:groups:devices", key = "gm:devices:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/groups/devices/view"} permissions = {"/device-mgt/groups/devices/view"}
), ),
@Scope( @Scope(
name = "View list of device count in the device group", name = "View list of device count in the device group",
description = "View list of device count in the device group", description = "View list of device count in the device group",
key = "perm:groups:devices-count", key = "gm:devices:count",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/groups/devices/view"} permissions = {"/device-mgt/groups/devices/view"}
), ),
@Scope( @Scope(
name = "Add devices to group", name = "Add devices to group",
description = "Add devices to group", description = "Add devices to group",
key = "perm:groups:devices-add", key = "gm:devices:add",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/groups/devices/add"} permissions = {"/device-mgt/groups/devices/add"}
), ),
@Scope( @Scope(
name = "Remove devices from group", name = "Remove devices from group",
description = "Remove devices from group", description = "Remove devices from group",
key = "perm:groups:devices-remove", key = "gm:devices:remove",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/groups/devices/remove"} permissions = {"/device-mgt/groups/devices/remove"}
), ),
@Scope( @Scope(
name = "Assign devices to groups", name = "Assign devices to groups",
description = "Assign devices to groups", description = "Assign devices to groups",
key = "perm:groups:assign", key = "gm:devices:assign",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/groups/devices/add"} permissions = {"/device-mgt/groups/devices/add"}
), ),
@Scope( @Scope(
name = "List of groups that have the device", name = "List of groups that have the device",
description = "List of groups that have the device", description = "List of groups that have the device",
key = "perm:groups:device", key = "gm:groups:device:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/groups/devices/view"} permissions = {"/device-mgt/groups/devices/view"}
), ),
@Scope( @Scope(
name = "View whether the groups has relevant device types", name = "View whether the groups has relevant device types",
description = "View whether the groups has relevant device types", description = "View whether the groups has relevant device types",
key = "perm:groups:devices-types", key = "gm:devices-types:view",
roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/groups/devices/types"}
),
@Scope(
name = "View whether the groups has relevant device types",
description = "View whether the groups has relevant device types",
key = "perm:groups:add",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/groups/device-types"} permissions = {"/device-mgt/groups/device-types"}
) )
@ -209,7 +202,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:groups") @ExtensionProperty(name = Constants.SCOPE, value = "gm:groups:view")
}) })
}, },
nickname = "getGroupsWithFilter" nickname = "getGroupsWithFilter"
@ -284,7 +277,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:groups") @ExtensionProperty(name = Constants.SCOPE, value = "gm:groups:view")
}) })
}, },
nickname = "getGroupsWithHierarchyNonAdmin" nickname = "getGroupsWithHierarchyNonAdmin"
@ -365,7 +358,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:count") @ExtensionProperty(name = Constants.SCOPE, value = "gm:groups:count")
}) })
}, },
nickname = "getGroupCountNonAdmin" nickname = "getGroupCountNonAdmin"
@ -411,7 +404,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:count") @ExtensionProperty(name = Constants.SCOPE, value = "gm:groups:count")
}) })
}, },
nickname = "getGroupCountNonAdmin" nickname = "getGroupCountNonAdmin"
@ -456,7 +449,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:add") @ExtensionProperty(name = Constants.SCOPE, value = "gm:groups:add")
}) })
}, },
nickname = "createGroupByGroupObject" nickname = "createGroupByGroupObject"
@ -525,7 +518,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:groups-view") @ExtensionProperty(name = Constants.SCOPE, value = "gm:groups:groups-view")
}) })
} }
) )
@ -598,7 +591,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:groups-view") @ExtensionProperty(name = Constants.SCOPE, value = "gm:groups:groups-view")
}) })
}, },
nickname = "getGroupByGroupNameFilter" nickname = "getGroupByGroupNameFilter"
@ -665,7 +658,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:update") @ExtensionProperty(name = Constants.SCOPE, value = "gm:groups:update")
}) })
} }
) )
@ -723,7 +716,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:remove") @ExtensionProperty(name = Constants.SCOPE, value = "gm:groups:remove")
}) })
} }
) )
@ -780,7 +773,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:share") @ExtensionProperty(name = Constants.SCOPE, value = "gm:roles:share")
}) })
} }
) )
@ -837,7 +830,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:roles") @ExtensionProperty(name = Constants.SCOPE, value = "gm:roles:view")
}) })
} }
) )
@ -889,7 +882,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:devices") @ExtensionProperty(name = Constants.SCOPE, value = "gm:devices:view")
}) })
} }
) )
@ -963,7 +956,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:devices-count") @ExtensionProperty(name = Constants.SCOPE, value = "gm:devices:count")
}) })
} }
) )
@ -1016,7 +1009,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:devices-add") @ExtensionProperty(name = Constants.SCOPE, value = "gm:devices:add")
}) })
} }
) )
@ -1072,7 +1065,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:devices-remove") @ExtensionProperty(name = Constants.SCOPE, value = "gm:devices:remove")
}) })
} }
) )
@ -1129,7 +1122,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:assign") @ExtensionProperty(name = Constants.SCOPE, value = "gm:devices:assign")
}) })
} }
) )
@ -1184,7 +1177,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:device") @ExtensionProperty(name = Constants.SCOPE, value = "gm:groups:device:view")
}) })
}, },
nickname = "getGroupsNonAdmin" nickname = "getGroupsNonAdmin"
@ -1246,7 +1239,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:devices-types") @ExtensionProperty(name = Constants.SCOPE, value = "gm:devices-types:view")
}) })
}, },
nickname = "getGroupByGroupNameFilter" nickname = "getGroupByGroupNameFilter"
@ -1301,7 +1294,7 @@ public interface GroupManagementService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:add") @ExtensionProperty(name = Constants.SCOPE, value = "gm:groups:add")
}) })
} }
) )

@ -73,28 +73,28 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "View metadata records", name = "View metadata records",
description = "View metadata records", description = "View metadata records",
key = "perm:metadata:view", key = "dm:metadata:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/metadata/view"} permissions = {"/device-mgt/metadata/view"}
), ),
@Scope( @Scope(
name = "Create a metadata record", name = "Create a metadata record",
description = "Create a metadata record", description = "Create a metadata record",
key = "perm:metadata:create", key = "dm:metadata:create",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/metadata/create"} permissions = {"/device-mgt/metadata/create"}
), ),
@Scope( @Scope(
name = "Update a metadata record", name = "Update a metadata record",
description = "Updating a specified metadata record", description = "Updating a specified metadata record",
key = "perm:metadata:update", key = "dm:metadata:update",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/metadata/update"} permissions = {"/device-mgt/metadata/update"}
), ),
@Scope( @Scope(
name = "Delete a metadata record", name = "Delete a metadata record",
description = "Delete a specified metadata record", description = "Delete a specified metadata record",
key = "perm:metadata:remove", key = "dm:metadata:remove",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/metadata/remove"} permissions = {"/device-mgt/metadata/remove"}
) )
@ -115,7 +115,7 @@ public interface MetadataService {
tags = "Device Metadata Management", tags = "Device Metadata Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:metadata:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:metadata:view")
}) })
} }
) )
@ -171,7 +171,7 @@ public interface MetadataService {
tags = "Device Metadata Management", tags = "Device Metadata Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:metadata:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:metadata:view")
}) })
} }
) )
@ -216,7 +216,7 @@ public interface MetadataService {
tags = "Device Metadata Management", tags = "Device Metadata Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:metadata:create") @ExtensionProperty(name = Constants.SCOPE, value = "dm:metadata:create")
}) })
} }
) )
@ -267,7 +267,7 @@ public interface MetadataService {
tags = "Device Metadata Management", tags = "Device Metadata Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:metadata:update") @ExtensionProperty(name = Constants.SCOPE, value = "dm:metadata:update")
}) })
} }
) )
@ -314,7 +314,7 @@ public interface MetadataService {
tags = "Device Metadata Management", tags = "Device Metadata Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:metadata:remove") @ExtensionProperty(name = Constants.SCOPE, value = "dm:metadata:remove")
}) })
} }
) )

@ -71,14 +71,14 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "Getting All Device Notification Details", name = "Getting All Device Notification Details",
description = "Getting All Device Notification Details", description = "Getting All Device Notification Details",
key = "perm:notifications:view", key = "dm:notifications:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/notifications/view"} permissions = {"/device-mgt/notifications/view"}
), ),
@Scope( @Scope(
name = "Updating the Device Notification Status", name = "Updating the Device Notification Status",
description = "Updating the Device Notification Status", description = "Updating the Device Notification Status",
key = "perm:notifications:mark-checked", key = "dm:notif:mark-checked",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/notifications/view"} permissions = {"/device-mgt/notifications/view"}
) )
@ -99,7 +99,7 @@ public interface NotificationManagementService {
tags = "Device Notification Management", tags = "Device Notification Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:notifications:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:notifications:view")
}) })
} }
) )
@ -188,7 +188,7 @@ public interface NotificationManagementService {
tags = "Device Notification Management", tags = "Device Notification Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:notifications:mark-checked") @ExtensionProperty(name = Constants.SCOPE, value = "dm:notif:mark-checked")
}) })
} }
) )
@ -228,7 +228,7 @@ public interface NotificationManagementService {
tags = "Device Notification Management", tags = "Device Notification Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:notifications:mark-checked") @ExtensionProperty(name = Constants.SCOPE, value = "dm:notif:mark-checked")
}) })
} }
) )

@ -77,70 +77,70 @@ import java.util.List;
@Scope( @Scope(
name = "Adding a Policy", name = "Adding a Policy",
description = "Adding a Policy", description = "Adding a Policy",
key = "perm:policies:manage", key = "pm:policies:add",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/policies/manage"} permissions = {"/device-mgt/policies/manage"}
), ),
@Scope( @Scope(
name = "Getting Details of Policies", name = "Getting Details of Policies",
description = "Getting Details of Policies", description = "Getting Details of Policies",
key = "perm:policies:get-details", key = "pm:policies:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/policies/view"} permissions = {"/device-mgt/policies/view"}
), ),
@Scope( @Scope(
name = "Getting Details of a Policy", name = "Getting Details of a Policy",
description = "Getting Details of a Policy", description = "Getting Details of a Policy",
key = "perm:policies:get-policy-details", key = "pm:policies:details:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/policies/view"} permissions = {"/device-mgt/policies/view"}
), ),
@Scope( @Scope(
name = "Updating a Policy", name = "Updating a Policy",
description = "Updating a Policy", description = "Updating a Policy",
key = "perm:policies:update", key = "pm:policies:update",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/policies/manage"} permissions = {"/device-mgt/policies/manage"}
), ),
@Scope( @Scope(
name = "Removing Multiple Policies", name = "Removing Multiple Policies",
description = "Removing Multiple Policies", description = "Removing Multiple Policies",
key = "perm:policies:remove", key = "pm:policies:remove",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/policies/manage"} permissions = {"/device-mgt/policies/manage"}
), ),
@Scope( @Scope(
name = "Activating Policies", name = "Activating Policies",
description = "Activating Policies", description = "Activating Policies",
key = "perm:policies:activate", key = "pm:policies:activate",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/policies/manage"} permissions = {"/device-mgt/policies/manage"}
), ),
@Scope( @Scope(
name = "Deactivating Policies", name = "Deactivating Policies",
description = "Deactivating Policies", description = "Deactivating Policies",
key = "perm:policies:deactivate", key = "pm:policies:deactivate",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/policies/manage"} permissions = {"/device-mgt/policies/manage"}
), ),
@Scope( @Scope(
name = "Applying Changes on Policies", name = "Applying Changes on Policies",
description = "Applying Changes on Policies", description = "Applying Changes on Policies",
key = "perm:policies:changes", key = "pm:policies:change",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/policies/manage"} permissions = {"/device-mgt/policies/manage"}
), ),
@Scope( @Scope(
name = "Updating the Policy Priorities", name = "Updating the Policy Priorities",
description = "Updating the Policy Priorities", description = "Updating the Policy Priorities",
key = "perm:policies:priorities", key = "pm:policies:priorities:update",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/policies/manage"} permissions = {"/device-mgt/policies/manage"}
), ),
@Scope( @Scope(
name = "Fetching the Effective Policy", name = "Fetching the Effective Policy",
description = "Fetching the Effective Policy", description = "Fetching the Effective Policy",
key = "perm:policies:effective-policy", key = "pm:policies:effective-policy",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/policies/view"} permissions = {"/device-mgt/policies/view"}
) )
@ -166,7 +166,7 @@ public interface PolicyManagementService {
tags = "Device Policy Management", tags = "Device Policy Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:policies:manage") @ExtensionProperty(name = Constants.SCOPE, value = "pm:policies:add")
}) })
} }
) )
@ -237,7 +237,7 @@ public interface PolicyManagementService {
tags = "Device Policy Management", tags = "Device Policy Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:policies:manage") @ExtensionProperty(name = Constants.SCOPE, value = "pm:policies:add")
}) })
} }
) )
@ -306,7 +306,7 @@ public interface PolicyManagementService {
tags = "Device Policy Management", tags = "Device Policy Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:policies:get-details") @ExtensionProperty(name = Constants.SCOPE, value = "pm:policies:view")
}) })
} }
) )
@ -382,7 +382,7 @@ public interface PolicyManagementService {
tags = "Device Policy Management", tags = "Device Policy Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:policies:get-policy-details") @ExtensionProperty(name = Constants.SCOPE, value = "pm:policies:details:view")
}) })
} }
) )
@ -451,7 +451,7 @@ public interface PolicyManagementService {
tags = "Device Policy Management", tags = "Device Policy Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:policies:update") @ExtensionProperty(name = Constants.SCOPE, value = "pm:policies:update")
}) })
} }
) )
@ -520,7 +520,7 @@ public interface PolicyManagementService {
tags = "Device Policy Management", tags = "Device Policy Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:policies:remove") @ExtensionProperty(name = Constants.SCOPE, value = "pm:policies:remove")
}) })
} }
) )
@ -568,7 +568,7 @@ public interface PolicyManagementService {
tags = "Device Policy Management", tags = "Device Policy Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:policies:activate") @ExtensionProperty(name = Constants.SCOPE, value = "pm:policies:activate")
}) })
} }
) )
@ -610,7 +610,7 @@ public interface PolicyManagementService {
tags = "Device Policy Management", tags = "Device Policy Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:policies:deactivate") @ExtensionProperty(name = Constants.SCOPE, value = "pm:policies:deactivate")
}) })
} }
) )
@ -656,7 +656,7 @@ public interface PolicyManagementService {
tags = "Device Policy Management", tags = "Device Policy Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:policies:changes") @ExtensionProperty(name = Constants.SCOPE, value = "pm:policies:change")
}) })
} }
) )
@ -684,7 +684,7 @@ public interface PolicyManagementService {
tags = "Device Policy Management", tags = "Device Policy Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:policies:priorities") @ExtensionProperty(name = Constants.SCOPE, value = "pm:policies:priorities:update")
}) })
} }
) )
@ -720,7 +720,7 @@ public interface PolicyManagementService {
tags = "Device Policy Management", tags = "Device Policy Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:policies:effective-policy") @ExtensionProperty(name = Constants.SCOPE, value = "pm:policies:effective-policy")
}) })
} }
) )
@ -790,7 +790,7 @@ public interface PolicyManagementService {
tags = "Device Policy Management", tags = "Device Policy Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:policies:get-details") @ExtensionProperty(name = Constants.SCOPE, value = "pm:policies:view")
}) })
}, },
nickname = "getPoliciesFilteredByType" nickname = "getPoliciesFilteredByType"
@ -874,7 +874,7 @@ public interface PolicyManagementService {
tags = "Device Policy Management", tags = "Device Policy Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:policies:get-details") @ExtensionProperty(name = Constants.SCOPE, value = "pm:policies:view")
}) })
} }
) )

@ -60,7 +60,7 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "Remote Session Connection", name = "Remote Session Connection",
description = "", description = "",
key = "perm:remote-session-service:connect", key = "dm:remote:connect",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/remote-session"} permissions = {"/device-mgt/devices/owning-device/remote-session"}
) )
@ -85,7 +85,7 @@ public interface RemoteSessionService {
tags = "Remote Session Service Management", tags = "Remote Session Service Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:remote-session-service:connect") @ExtensionProperty(name = Constants.SCOPE, value = "dm:remote:connect")
}) })
} }
) )

@ -70,7 +70,7 @@ import java.util.List;
@Scope( @Scope(
name = "Getting Details of Registered Devices", name = "Getting Details of Registered Devices",
description = "Getting Details of Registered Devices", description = "Getting Details of Registered Devices",
key = "perm:devices:view", key = "rep:devices:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/view"} permissions = {"/device-mgt/devices/owning-device/view"}
), ),
@ -93,7 +93,7 @@ public interface ReportManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "rep:devices:view")
}) })
} }
) )
@ -177,7 +177,7 @@ public interface ReportManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "rep:devices:view")
}) })
} }
) )
@ -249,7 +249,7 @@ public interface ReportManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "rep:devices:view")
}) })
} }
) )
@ -327,7 +327,7 @@ public interface ReportManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "rep:devices:view")
}) })
} }
) )
@ -386,7 +386,7 @@ public interface ReportManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "rep:devices:view")
}) })
} }
) )
@ -436,7 +436,7 @@ public interface ReportManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "rep:devices:view")
}) })
} }
) )
@ -511,7 +511,7 @@ public interface ReportManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "rep:devices:view")
}) })
} }
) )
@ -579,7 +579,7 @@ public interface ReportManagementService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "rep:devices:view")
}) })
} }
) )

@ -51,56 +51,56 @@ import java.util.List;
@Scope( @Scope(
name = "Getting the List of Roles", name = "Getting the List of Roles",
description = "Getting the List of Roles", description = "Getting the List of Roles",
key = "perm:roles:view", key = "rm:roles:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/roles/view"} permissions = {"/device-mgt/roles/view"}
), ),
@Scope( @Scope(
name = "Getting Permission Details of a Role", name = "Getting Permission Details of a Role",
description = "Getting Permission Details of a Role", description = "Getting Permission Details of a Role",
key = "perm:roles:permissions", key = "rm:roles:permissions:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/roles/view"} permissions = {"/device-mgt/roles/view"}
), ),
@Scope( @Scope(
name = "Getting the List of Roles", name = "Getting the List of Roles",
description = "Getting the List of Roles", description = "Getting the List of Roles",
key = "perm:roles:details", key = "rm:roles:details:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/roles/view"} permissions = {"/device-mgt/roles/view"}
), ),
@Scope( @Scope(
name = "Adding a Role", name = "Adding a Role",
description = "Adding a Role", description = "Adding a Role",
key = "perm:roles:add", key = "rm:roles:add",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/roles/manage"} permissions = {"/device-mgt/roles/manage"}
), ),
@Scope( @Scope(
name = "Adding a combined Role", name = "Adding a combined Role",
description = "Adding a combined Role", description = "Adding a combined Role",
key = "perm:roles:create-combined-role", key = "rm:roles:combined:add",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/roles/manage"} permissions = {"/device-mgt/roles/manage"}
), ),
@Scope( @Scope(
name = "Updating Role Details", name = "Updating Role Details",
description = "Updating Role Details", description = "Updating Role Details",
key = "perm:roles:update", key = "rm:roles:update",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/roles/manage"} permissions = {"/device-mgt/roles/manage"}
), ),
@Scope( @Scope(
name = "Deleting a Role", name = "Deleting a Role",
description = "Deleting a Role", description = "Deleting a Role",
key = "perm:roles:delete", key = "rm:roles:delete",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/roles/manage"} permissions = {"/device-mgt/roles/manage"}
), ),
@Scope( @Scope(
name = "Adding Users to a Role", name = "Adding Users to a Role",
description = "Adding Users to a Role", description = "Adding Users to a Role",
key = "perm:roles:add-users", key = "rm:users:add",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/roles/manage"} permissions = {"/device-mgt/roles/manage"}
) )
@ -122,7 +122,7 @@ public interface RoleManagementService {
tags = "Role Management", tags = "Role Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:roles:view") @ExtensionProperty(name = Constants.SCOPE, value = "rm:roles:view")
}) })
} }
) )
@ -198,7 +198,7 @@ public interface RoleManagementService {
tags = "Role Management", tags = "Role Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:roles:view") @ExtensionProperty(name = Constants.SCOPE, value = "rm:roles:view")
}) })
} }
) )
@ -296,7 +296,7 @@ public interface RoleManagementService {
tags = "Role Management", tags = "Role Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:roles:view") @ExtensionProperty(name = Constants.SCOPE, value = "rm:roles:view")
}) })
} }
) )
@ -382,7 +382,7 @@ public interface RoleManagementService {
tags = "Role Management", tags = "Role Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:roles:permissions") @ExtensionProperty(name = Constants.SCOPE, value = "rm:roles:permissions:view")
}) })
} }
) )
@ -457,7 +457,7 @@ public interface RoleManagementService {
tags = "Role Management", tags = "Role Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:roles:details") @ExtensionProperty(name = Constants.SCOPE, value = "rm:roles:details:view")
}) })
} }
) )
@ -531,7 +531,7 @@ public interface RoleManagementService {
tags = "Role Management", tags = "Role Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:roles:add") @ExtensionProperty(name = Constants.SCOPE, value = "rm:roles:add")
}) })
} }
) )
@ -593,7 +593,7 @@ public interface RoleManagementService {
tags = "Role Management", tags = "Role Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:roles:create-combined-role") @ExtensionProperty(name = Constants.SCOPE, value = "rm:roles:combined:add")
}) })
} }
) )
@ -657,7 +657,7 @@ public interface RoleManagementService {
tags = "Role Management", tags = "Role Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:roles:update") @ExtensionProperty(name = Constants.SCOPE, value = "rm:roles:update")
}) })
} }
) )
@ -727,7 +727,7 @@ public interface RoleManagementService {
tags = "Role Management", tags = "Role Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:roles:delete") @ExtensionProperty(name = Constants.SCOPE, value = "rm:roles:delete")
}) })
} }
) )
@ -779,7 +779,7 @@ public interface RoleManagementService {
tags = "Role Management", tags = "Role Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:roles:add-users") @ExtensionProperty(name = Constants.SCOPE, value = "rm:users:add")
}) })
} }
) )

@ -80,91 +80,91 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "Adding a User", name = "Adding a User",
description = "Adding a User", description = "Adding a User",
key = "perm:users:add", key = "um:users:add",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/users/manage"} permissions = {"/device-mgt/users/manage"}
), ),
@Scope( @Scope(
name = "Getting Details of a User", name = "Getting Details of a User",
description = "Getting Details of a User", description = "Getting Details of a User",
key = "perm:users:details", key = "um:users:details:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/users/view"} permissions = {"/device-mgt/users/view"}
), ),
@Scope( @Scope(
name = "Updating Details of a User", name = "Updating Details of a User",
description = "Updating Details of a User", description = "Updating Details of a User",
key = "perm:users:update", key = "um:users:update",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/users/manage"} permissions = {"/device-mgt/users/manage"}
), ),
@Scope( @Scope(
name = "Deleting a User", name = "Deleting a User",
description = "Deleting a User", description = "Deleting a User",
key = "perm:users:delete", key = "um:users:delete",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/users/manage"} permissions = {"/device-mgt/users/manage"}
), ),
@Scope( @Scope(
name = "Getting the Role Details of a User", name = "Getting the Role Details of a User",
description = "Getting the Role Details of a User", description = "Getting the Role Details of a User",
key = "perm:users:roles", key = "um:roles:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/users/view"} permissions = {"/device-mgt/users/view"}
), ),
@Scope( @Scope(
name = "Getting Details of Users", name = "Getting Details of Users",
description = "Getting Details of Users", description = "Getting Details of Users",
key = "perm:users:user-details", key = "um:users:user-details:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/users/view"} permissions = {"/device-mgt/users/view"}
), ),
@Scope( @Scope(
name = "Getting the User Count", name = "Getting the User Count",
description = "Getting the User Count", description = "Getting the User Count",
key = "perm:users:count", key = "um:users:count",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/users/view"} permissions = {"/device-mgt/users/view"}
), ),
@Scope( @Scope(
name = "Getting the User existence status", name = "Getting the User existence status",
description = "Getting the User existence status", description = "Getting the User existence status",
key = "perm:users:is-exist", key = "um:users:is-exist",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/users/view"} permissions = {"/device-mgt/users/view"}
), ),
@Scope( @Scope(
name = "Searching for a User Name", name = "Searching for a User Name",
description = "Searching for a User Name", description = "Searching for a User Name",
key = "perm:users:search", key = "um:users:search",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/users/view"} permissions = {"/device-mgt/users/view"}
), ),
@Scope( @Scope(
name = "Changing the User Password", name = "Changing the User Password",
description = "Adding a User", description = "Adding a User",
key = "perm:users:credentials", key = "um:users:cred:change",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/login"} permissions = {"/login"}
), ),
@Scope( @Scope(
name = "Sending Enrollment Invitations to Users", name = "Sending Enrollment Invitations to Users",
description = "Sending Enrollment Invitations to Users", description = "Sending Enrollment Invitations to Users",
key = "perm:users:send-invitation", key = "um:users:invite",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/users/manage"} permissions = {"/device-mgt/users/manage"}
), ),
@Scope( @Scope(
name = "Get activities", name = "Get activities",
description = "Get activities", description = "Get activities",
key = "perm:get-activity", key = "um:activity:get",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/devices/owning-device/view"} permissions = {"/device-mgt/devices/owning-device/view"}
), ),
@Scope( @Scope(
name = "Getting the Permissions of the User", name = "Getting the Permissions of the User",
description = "Getting the Permissions of the User", description = "Getting the Permissions of the User",
key = "perm:user:permission-view", key = "um:users:permission:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/login"} permissions = {"/login"}
) )
@ -187,7 +187,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:add") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:add")
}) })
} }
) )
@ -246,7 +246,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:details") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:details:view")
}) })
} }
) )
@ -317,7 +317,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:update") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:update")
}) })
} }
) )
@ -384,7 +384,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:delete") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:delete")
}) })
} }
) )
@ -429,7 +429,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:roles") @ExtensionProperty(name = Constants.SCOPE, value = "um:roles:view")
}) })
} }
) )
@ -494,7 +494,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:user-details") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:user-details:view")
}) })
} }
) )
@ -572,7 +572,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:user-details") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:user-details:view")
}) })
}, },
nickname = "getUsersByFilter" nickname = "getUsersByFilter"
@ -658,7 +658,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:count") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:count")
}) })
} }
) )
@ -694,7 +694,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:is-exist") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:is-exist")
}) })
} }
) )
@ -738,7 +738,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:search") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:search")
}) })
} }
) )
@ -817,7 +817,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:credentials") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:cred:change")
}) })
} }
) )
@ -864,7 +864,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:send-invitation") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:invite")
}) })
} }
) )
@ -907,7 +907,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:send-invitation") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:invite")
}) })
} }
) )
@ -955,7 +955,7 @@ public interface UserManagementService {
tags = "Activity Info Provider", tags = "Activity Info Provider",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:get-activity") @ExtensionProperty(name = Constants.SCOPE, value = "um:activity:get")
}) })
} }
) )
@ -1031,7 +1031,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:details") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:details:view")
}) })
} }
) )
@ -1091,7 +1091,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:details") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:details:view")
}) })
} }
) )
@ -1147,7 +1147,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:details") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:details:view")
}) })
} }
) )
@ -1203,7 +1203,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:user:permission-view") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:permission:view")
}) })
} }
) )
@ -1250,7 +1250,7 @@ public interface UserManagementService {
tags = "User Management", tags = "User Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:users:user-details") @ExtensionProperty(name = Constants.SCOPE, value = "um:users:user-details:view")
}) })
} }
) )

@ -67,14 +67,14 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "View Whitelabel", name = "View Whitelabel",
description = "View whitelabel details", description = "View whitelabel details",
key = "perm:whitelabel:view", key = "dm:whitelable:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/whitelabel/view"} permissions = {"/device-mgt/whitelabel/view"}
), ),
@Scope( @Scope(
name = "Update Whitelabel", name = "Update Whitelabel",
description = "Updating whitelabel", description = "Updating whitelabel",
key = "perm:whitelabel:update", key = "dm:whitelable:update",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/whitelabel/update"} permissions = {"/device-mgt/whitelabel/update"}
), ),
@ -210,7 +210,7 @@ public interface WhiteLabelService {
tags = "Tenant Metadata Management", tags = "Tenant Metadata Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:whitelabel:update") @ExtensionProperty(name = Constants.SCOPE, value = "dm:whitelable:update")
}) })
} }
) )
@ -250,7 +250,7 @@ public interface WhiteLabelService {
tags = "Tenant Metadata Management", tags = "Tenant Metadata Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:whitelabel:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:whitelable:view")
}) })
} }
) )
@ -291,7 +291,7 @@ public interface WhiteLabelService {
tags = "Tenant Metadata Management", tags = "Tenant Metadata Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:whitelabel:update") @ExtensionProperty(name = Constants.SCOPE, value = "dm:whitelable:update")
}) })
} }
) )

@ -65,14 +65,14 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "Installing an Application (Internal API)", name = "Installing an Application (Internal API)",
description = "Installing an Application (Internal API)", description = "Installing an Application (Internal API)",
key = "perm:applications:install", key = "am:admin:app:install",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/applications/manage"} permissions = {"/device-mgt/applications/manage"}
), ),
@Scope( @Scope(
name = "Uninstalling an Application (Internal API)", name = "Uninstalling an Application (Internal API)",
description = "Uninstalling an Application (Internal API)", description = "Uninstalling an Application (Internal API)",
key = "perm:applications:uninstall", key = "am:admin:app:uninstall",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/applications/manage"} permissions = {"/device-mgt/applications/manage"}
) )
@ -94,7 +94,7 @@ public interface ApplicationManagementAdminService {
tags = "Application Management Administrative Service", tags = "Application Management Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:applications:install") @ExtensionProperty(name = Constants.SCOPE, value = "am:admin:app:install")
}) })
} }
) )
@ -138,7 +138,7 @@ public interface ApplicationManagementAdminService {
tags = "Application Management Administrative Service", tags = "Application Management Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:applications:uninstall") @ExtensionProperty(name = Constants.SCOPE, value = "am:admin:app:uninstall")
}) })
} }
) )

@ -65,7 +65,7 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "Verify device authorization", name = "Verify device authorization",
description = "Verify device authorization", description = "Verify device authorization",
key = "perm:authorization:verify", key = "dm:authorization:verify",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/authorization/verify"} permissions = {"/device-mgt/authorization/verify"}
) )
@ -89,7 +89,7 @@ public interface DeviceAccessAuthorizationAdminService {
tags = "Authorization Administrative Service", tags = "Authorization Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:authorization:verify") @ExtensionProperty(name = Constants.SCOPE, value = "dm:authorization:verify")
}) })
}) })
@ -128,7 +128,7 @@ public interface DeviceAccessAuthorizationAdminService {
tags = "Authorization Administrative Service", tags = "Authorization Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:authorization:verify") @ExtensionProperty(name = Constants.SCOPE, value = "dm:authorization:verify")
}) })
}) })

@ -55,7 +55,7 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "Devicetype deployment", name = "Devicetype deployment",
description = "Deploy devicetype", description = "Deploy devicetype",
key = "perm:devicetype:deployment", key = "dm:device-type:deploy",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/devicetype/deploy"} permissions = {"/device-mgt/devicetype/deploy"}
) )
@ -74,7 +74,7 @@ public interface DeviceAnalyticsArtifactUploaderAdminService {
tags = "Devicetype Deployment Service", tags = "Devicetype Deployment Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devicetype:deployment") @ExtensionProperty(name = Constants.SCOPE, value = "dm:device-type:deploy")
}) })
}) })

@ -77,28 +77,28 @@ import java.util.List;
@Scope( @Scope(
name = "Getting Details of a Device", name = "Getting Details of a Device",
description = "Getting Details of a Device", description = "Getting Details of a Device",
key = "perm:admin:devices:view", key = "dm:admin:devices:view",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/devices/owning-device/view"} permissions = {"/device-mgt/devices/owning-device/view"}
), ),
@Scope( @Scope(
name = "Update the Device Owner", name = "Update the Device Owner",
description = "Update the ownership of the device", description = "Update the ownership of the device",
key = "perm:admin:devices:update-enrollment", key = "dm:admin:enrollment:update",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/admin/devices/update-enrollment"} permissions = {"/device-mgt/admin/devices/update-enrollment"}
), ),
@Scope( @Scope(
name = "Permanently Delete the device specified by device id", name = "Permanently Delete the device specified by device id",
description = "Permanently Delete the device specified by device id", description = "Permanently Delete the device specified by device id",
key = "perm:devices:permanent-delete", key = "dm:admin:devices:permanent-delete",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/admin/devices/permanent-delete"} permissions = {"/device-mgt/admin/devices/permanent-delete"}
), ),
@Scope( @Scope(
name = "Get Usage of Devices", name = "Get Usage of Devices",
description = "Get Usage of Devices", description = "Get Usage of Devices",
key = "perm:admin:usage:view", key = "dm:admin:devices:usage:view",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/admin/devices/usage/view"} permissions = {"/device-mgt/admin/devices/usage/view"}
), ),
@ -117,7 +117,7 @@ public interface DeviceManagementAdminService {
tags = "Device Management Administrative Service", tags = "Device Management Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:admin:devices:view")
}) })
} }
) )
@ -211,7 +211,7 @@ public interface DeviceManagementAdminService {
tags = "Device Management Administrative Service", tags = "Device Management Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin:devices:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:admin:devices:view")
}) })
} }
) )
@ -264,7 +264,7 @@ public interface DeviceManagementAdminService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin:devices:update-enrollment") @ExtensionProperty(name = Constants.SCOPE, value = "dm:admin:enrollment:update")
}) })
} }
) )
@ -315,7 +315,7 @@ public interface DeviceManagementAdminService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:devices:permanent-delete") @ExtensionProperty(name = Constants.SCOPE, value = "dm:admin:devices:permanent-delete")
}) })
} }
) )
@ -366,7 +366,7 @@ public interface DeviceManagementAdminService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:android:enroll") @ExtensionProperty(name = Constants.SCOPE, value = "and:devices:enroll")
}) })
} }
) )
@ -425,7 +425,7 @@ public interface DeviceManagementAdminService {
tags = "Device Management", tags = "Device Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin:usage:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:admin:devices:usage:view")
}) })
} }
) )

@ -73,21 +73,21 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "Manage a Device Type", name = "Manage a Device Type",
description = "Add, Edit or View a Device Type", description = "Add, Edit or View a Device Type",
key = "perm:admin:device-type", key = "dm:admin:device-type:modify",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/admin/device-type"} permissions = {"/device-mgt/admin/device-type"}
), ),
@Scope( @Scope(
name = "Getting Details of a Device Type", name = "Getting Details of a Device Type",
description = "Getting Details of a Device Type", description = "Getting Details of a Device Type",
key = "perm:admin:device-type:view", key = "dm:admin:device-type:view",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/admin/device-type/view"} permissions = {"/device-mgt/admin/device-type/view"}
), ),
@Scope( @Scope(
name = "Add Device Type Config", name = "Add Device Type Config",
description = "Add Platform Config of a Device Type", description = "Add Platform Config of a Device Type",
key = "perm:admin:device-type:configs", key = "dm:admin:device-type:conf:add",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/admin/device-type/config"} permissions = {"/device-mgt/admin/device-type/config"}
) )
@ -105,7 +105,7 @@ public interface DeviceTypeManagementAdminService {
tags = "Device Type Management Administrative Service", tags = "Device Type Management Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin:device-type:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:admin:device-type:view")
}) })
} }
) )
@ -159,7 +159,7 @@ public interface DeviceTypeManagementAdminService {
tags = "Device Type Management Administrative Service", tags = "Device Type Management Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin:device-type:view") @ExtensionProperty(name = Constants.SCOPE, value = "dm:admin:device-type:view")
}) })
} }
) )
@ -212,7 +212,7 @@ public interface DeviceTypeManagementAdminService {
tags = "Device Type Management Administrative Service", tags = "Device Type Management Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin:device-type") @ExtensionProperty(name = Constants.SCOPE, value = "dm:admin:device-type:modify")
}) })
} }
) )
@ -265,7 +265,7 @@ public interface DeviceTypeManagementAdminService {
tags = "Device Type Management Administrative Service", tags = "Device Type Management Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin:device-type") @ExtensionProperty(name = Constants.SCOPE, value = "dm:admin:device-type:modify")
}) })
} }
) )
@ -321,7 +321,7 @@ public interface DeviceTypeManagementAdminService {
tags = "Device Type Management Administrative Service", tags = "Device Type Management Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin:device-type:configs") @ExtensionProperty(name = Constants.SCOPE, value = "dm:admin:device-type:conf:add")
}) })
} }
) )
@ -379,7 +379,7 @@ public interface DeviceTypeManagementAdminService {
tags = "Device Type Management Administrative Service", tags = "Device Type Management Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin:device-type") @ExtensionProperty(name = Constants.SCOPE, value = "dm:admin:device-type:modify")
}) })
} }
) )
@ -433,7 +433,7 @@ public interface DeviceTypeManagementAdminService {
tags = "Device Type Management Administrative Service", tags = "Device Type Management Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin:device-type") @ExtensionProperty(name = Constants.SCOPE, value = "dm:admin:device-type:modify")
}) })
} }
) )
@ -485,7 +485,7 @@ public interface DeviceTypeManagementAdminService {
tags = "Device Type Management Administrative Service", tags = "Device Type Management Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin:device-type") @ExtensionProperty(name = Constants.SCOPE, value = "dm:admin:device-type:modify")
}) })
} }
) )
@ -539,7 +539,7 @@ public interface DeviceTypeManagementAdminService {
tags = "Device Type Management Administrative Service", tags = "Device Type Management Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin:device-type") @ExtensionProperty(name = Constants.SCOPE, value = "dm:admin:device-type:modify")
}) })
} }
) )
@ -592,7 +592,7 @@ public interface DeviceTypeManagementAdminService {
tags = "Device Type Management Administrative Service", tags = "Device Type Management Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin:device-type") @ExtensionProperty(name = Constants.SCOPE, value = "dm:admin:device-type:modify")
}) })
} }
) )

@ -75,21 +75,21 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "View groups", name = "View groups",
description = "", description = "",
key = "perm:admin-groups:view", key = "gm:admin:groups:view",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/admin/groups/view"} permissions = {"/device-mgt/admin/groups/view"}
), ),
@Scope( @Scope(
name = "Count groups", name = "Count groups",
description = "", description = "",
key = "perm:admin-groups:count", key = "gm:admin:groups:count",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/admin/groups/view"} permissions = {"/device-mgt/admin/groups/view"}
), ),
@Scope( @Scope(
name = "Add groups", name = "Add groups",
description = "", description = "",
key = "perm:admin-groups:add", key = "gm:admin:groups:add",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/admin/groups/add"} permissions = {"/device-mgt/admin/groups/add"}
) )
@ -106,7 +106,7 @@ public interface GroupManagementAdminService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin-groups:view") @ExtensionProperty(name = Constants.SCOPE, value = "gm:admin:groups:view")
}) })
} }
) )
@ -182,7 +182,7 @@ public interface GroupManagementAdminService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin-groups:view") @ExtensionProperty(name = Constants.SCOPE, value = "gm:admin:groups:view")
}) })
} }
) )
@ -266,7 +266,7 @@ public interface GroupManagementAdminService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin-groups:count") @ExtensionProperty(name = Constants.SCOPE, value = "gm:admin:groups:count")
}) })
} }
) )
@ -318,7 +318,7 @@ public interface GroupManagementAdminService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin-groups:count") @ExtensionProperty(name = Constants.SCOPE, value = "gm:admin:groups:count")
}) })
} }
) )
@ -369,7 +369,7 @@ public interface GroupManagementAdminService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin-groups:add") @ExtensionProperty(name = Constants.SCOPE, value = "gm:admin:groups:add")
}) })
} }
) )
@ -439,7 +439,7 @@ public interface GroupManagementAdminService {
tags = "Device Group Management", tags = "Device Group Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:groups:add") @ExtensionProperty(name = Constants.SCOPE, value = "gm:groups:add")
}) })
} }
) )

@ -51,14 +51,14 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "View Users", name = "View Users",
description = "View Users", description = "View Users",
key = "perm:admin-users:view", key = "um:admin:users:view",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/users/manage"} permissions = {"/device-mgt/users/manage"}
), ),
@Scope( @Scope(
name = "Delete Users Device Information", name = "Delete Users Device Information",
description = "Delete users device details", description = "Delete users device details",
key = "perm:admin-users:remove", key = "um:admin:users:remove",
roles = {"Internal/devicemgt-admin"}, roles = {"Internal/devicemgt-admin"},
permissions = {"/device-mgt/users/manage"} permissions = {"/device-mgt/users/manage"}
) )
@ -84,7 +84,7 @@ public interface UserManagementAdminService {
tags = "User Management Administrative Service", tags = "User Management Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin-users:view") @ExtensionProperty(name = Constants.SCOPE, value = "um:admin:users:view")
}) })
} }
) )
@ -143,7 +143,7 @@ public interface UserManagementAdminService {
tags = "Device details remove", tags = "Device details remove",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin-users:remove") @ExtensionProperty(name = Constants.SCOPE, value = "um:admin:users:remove")
}) })
} }
) )
@ -201,7 +201,7 @@ public interface UserManagementAdminService {
tags = "Device details remove privacy compliance", tags = "Device details remove privacy compliance",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = Constants.SCOPE, value = "perm:admin-users:remove") @ExtensionProperty(name = Constants.SCOPE, value = "um:admin:users:remove")
}) })
} }
) )

@ -70,28 +70,28 @@ import java.util.List;
@Scope( @Scope(
name = "View configurations", name = "View configurations",
description = "", description = "",
key = "perm:view-configuration", key = "dm:conf:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/platform-configurations/view"} permissions = {"/device-mgt/platform-configurations/view"}
), ),
@Scope( @Scope(
name = "Manage configurations", name = "Manage configurations",
description = "", description = "",
key = "perm:manage-configuration", key = "dm:conf:manage",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/device-mgt/platform-configurations/manage"} permissions = {"/device-mgt/platform-configurations/manage"}
), ),
@Scope( @Scope(
name = "Getting Details of Device tenants", name = "Getting Details of Device tenants",
description = "Getting Details of Device tenants", description = "Getting Details of Device tenants",
key = "perm:admin:tenant:view", key = "admin:tenant:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/tenants/view"} permissions = {"/tenants/view"}
), ),
@Scope( @Scope(
name = "Add a permission to the permission tree", name = "Add a permission to the permission tree",
description = "Add a permission to the permission tree", description = "Add a permission to the permission tree",
key = "perm:admin:permissions:add", key = "admin:permissions:add",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/permissions/add"} permissions = {"/permissions/add"}
) )
@ -173,7 +173,7 @@ public interface DeviceManagementConfigService {
tags = "Device Management Configuration", tags = "Device Management Configuration",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = "scope", value = "perm:manage-configuration") @ExtensionProperty(name = "scope", value = "dm:conf:manage")
}) })
} }
) )
@ -257,7 +257,7 @@ public interface DeviceManagementConfigService {
tags = "Device Management Administrative Service", tags = "Device Management Administrative Service",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = "scope", value ="perm:admin:tenant:view") @ExtensionProperty(name = "scope", value ="admin:tenant:view")
}) })
} }
) )
@ -305,7 +305,7 @@ public interface DeviceManagementConfigService {
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = "scope", value = @ExtensionProperty(name = "scope", value =
"perm:admin:permissions:add") "admin:permissions:add")
}) })
} }
) )

@ -38,7 +38,7 @@ public final class DeviceManagementConstants {
private ConfigurationManagement(){ private ConfigurationManagement(){
throw new AssertionError(); throw new AssertionError();
} }
public static final String SCOPES_FOR_TOKEN = "perm:device:operations perm:device:publish-event perm:windows:enroll"; public static final String SCOPES_FOR_TOKEN = "dm:ops:view dm:device:event:publish win:devices:enroll";
public static final String IOT_GATEWAY_HOST = "iot.gateway.host"; public static final String IOT_GATEWAY_HOST = "iot.gateway.host";
public static final String IOT_GATEWAY_HTTPS_PORT = "iot.gateway.https.port"; public static final String IOT_GATEWAY_HTTPS_PORT = "iot.gateway.https.port";
public static final String IOT_CORE_HOST = "iot.core.host"; public static final String IOT_CORE_HOST = "iot.core.host";

@ -68,103 +68,106 @@
"copyrightSuffix": " All Rights Reserved." "copyrightSuffix": " All Rights Reserved."
}, },
"scopes": [ "scopes": [
"perm:sign-csr", "dm:sign-csr",
"perm:admin:devices:view", "dm:admin:devices:view",
"perm:admin:topics:view", "dm:admin:topics:view",
"perm:roles:add", "rm:roles:add",
"perm:roles:add-users", "rm:users:add",
"perm:roles:update", "rm:roles:update",
"perm:roles:permissions", "rm:roles:permissions:view",
"perm:roles:details", "rm:roles:details:view",
"perm:roles:view", "rm:roles:view",
"perm:roles:create-combined-role", "rm:roles:combined:add",
"perm:roles:delete", "rm:roles:delete",
"perm:dashboard:vulnerabilities", "an:db:vulnerabilities",
"perm:dashboard:non-compliant-count", "an:db:non-compliant:count",
"perm:dashboard:non-compliant", "an:db:non-compliant",
"perm:dashboard:by-groups", "an:db:by-groups",
"perm:dashboard:device-counts", "an:db:device:count",
"perm:dashboard:feature-non-compliant", "an:db:feature-non-compliant",
"perm:dashboard:count-overview", "an:db:overview:count",
"perm:dashboard:filtered-count", "an:db:filtered-count",
"perm:dashboard:details", "an:db:details",
"perm:get-activity", "dm:activity:get",
"perm:devices:delete", "dm:devices:delete",
"perm:devices:applications", "dm:devices:app:view",
"perm:devices:effective-policy", "dm:devices:policy:view",
"perm:devices:compliance-data", "dm:devices:compliance:view",
"perm:devices:features", "dm:devices:features:view",
"perm:devices:operations", "dm:devices:ops:view",
"perm:devices:search", "dm:devices:search",
"perm:devices:details", "dm:devices:details",
"perm:devices:update", "dm:devices:update",
"perm:devices:view", "dm:devices:view",
"perm:view-configuration", "rep:devices:view",
"perm:manage-configuration", "dm:conf:view",
"perm:policies:remove", "dm:conf:manage",
"perm:policies:priorities", "pm:policies:remove",
"perm:policies:deactivate", "pm:policies:priorities:update",
"perm:policies:get-policy-details", "pm:policies:deactivate",
"perm:policies:manage", "pm:policies:details:view",
"perm:policies:activate", "pm:policies:add",
"perm:policies:update", "pm:policies:activate",
"perm:policies:changes", "pm:policies:update",
"perm:policies:get-details", "pm:policies:change",
"perm:users:add", "pm:policies:view",
"perm:users:details", "dm:device-type:policies:view",
"perm:users:count", "um:users:add",
"perm:users:delete", "um:users:details:view",
"perm:users:roles", "um:users:count",
"perm:users:user-details", "um:users:delete",
"perm:users:credentials", "um:roles:view",
"perm:users:search", "um:users:user-details:view",
"perm:users:is-exist", "um:users:cred:change",
"perm:users:update", "um:users:search",
"perm:users:send-invitation", "um:users:is-exist",
"perm:admin-users:view", "um:users:update",
"perm:admin:devices:update-enrollment", "um:users:invite",
"perm:groups:devices", "um:admin:users:view",
"perm:groups:update", "um:activity:get",
"perm:groups:add", "dm:admin:enrollment:update",
"perm:groups:device", "gm:devices:view",
"perm:groups:devices-count", "gm:groups:update",
"perm:groups:remove", "gm:groups:add",
"perm:groups:groups", "gm:groups:device:view",
"perm:groups:groups-view", "gm:devices:count",
"perm:groups:share", "gm:groups:remove",
"perm:groups:count", "gm:groups:view",
"perm:groups:roles", "gm:groups:groups-view",
"perm:groups:devices-remove", "gm:roles:share",
"perm:groups:devices-add", "gm:groups:count",
"perm:groups:assign", "gm:roles:view",
"perm:device-types:configs", "gm:devices:remove",
"perm:device-types:features", "gm:devices:add",
"perm:device-types:types", "gm:devices:assign",
"perm:applications:install", "dm:device-type:conf:view",
"perm:applications:uninstall", "dm:device-type:features:view",
"perm:admin-groups:count", "dm:device-type:view",
"perm:admin-groups:view", "am:admin:app:install",
"perm:notifications:mark-checked", "am:admin:app:uninstall",
"perm:notifications:view", "gm:admin:groups:count",
"perm:admin:certificates:delete", "gm:admin:groups:view",
"perm:admin:certificates:details", "dm:notif:mark-checked",
"perm:admin:certificates:view", "dm:notifications:view",
"perm:admin:certificates:add", "cm:cert:delete",
"perm:admin:certificates:verify", "cm:cert:details:get",
"perm:admin", "cm:cert:view",
"perm:devicetype:deployment", "cm:cert:add",
"perm:device-types:events", "cm:cert:verify",
"perm:device-types:events:view", "dm:admin",
"perm:admin:device-type", "dm:device-type:deploy",
"perm:admin:device-type:view", "dm:device-type:event:modify",
"perm:admin:device-type:configs", "dm:device-type:event:view",
"perm:device:enroll", "dm:admin:device-type:modify",
"perm:geo-service:analytics-view", "dm:admin:device-type:view",
"perm:geo-service:alerts-manage", "dm:admin:device-type:conf:add",
"perm:devices:permanent-delete", "dm:device:enroll",
"dm:geo:an:view",
"dm:geo:alerts:manage",
"dm:admin:devices:permanent-delete",
"appm:read", "appm:read",
"perm:enterprise:modify", "and:enterprise:modify",
"perm:enterprise:view" "and:enterprise:view"
], ],
"isOAuthEnabled": true, "isOAuthEnabled": true,
"backendRestEndpoints": { "backendRestEndpoints": {

@ -408,8 +408,8 @@ deviceModule = function () {
//noinspection JSUnresolvedFunction //noinspection JSUnresolvedFunction
var jwtClient = JWTClientManagerService.getJWTClient(); var jwtClient = JWTClientManagerService.getJWTClient();
// returning access token by JWT grant type // returning access token by JWT grant type
var deviceScope = "device_" + type.replace(" ", "") + "_" + deviceId + " perm:device:enroll " + var deviceScope = "device_" + type.replace(" ", "") + "_" + deviceId + " dm:device:enroll " +
"perm:device:disenroll perm:device:modify perm:device:operations perm:device:publish-event"; "dm:device:disenroll dm:device:modify dm:ops:view dm:device:event:publish";
var tokenInfo = jwtClient.getAccessToken(config.clientId, config.clientSecret, var tokenInfo = jwtClient.getAccessToken(config.clientId, config.clientSecret,
userName, deviceScope); userName, deviceScope);
config.accessToken = tokenInfo.getAccessToken(); config.accessToken = tokenInfo.getAccessToken();

@ -3,14 +3,14 @@
"label": "Windows", "label": "Windows",
"category": "mobile", "category": "mobile",
"scopes" : [ "scopes" : [
"perm:windows:enroll", "win:devices:enroll",
"perm:windows:lock-devices", "win:ops:lock-devices",
"perm:windows:ring", "win:ops:ring",
"perm:windows:wipe", "win:ops:wipe",
"perm:windows:lock-reset", "win:ops:lock-reset",
"perm:windows:reboot", "win:ops:reboot",
"perm:windows:location", "win:ops:location",
"perm:windows:disenroll" "win:ops:disenroll"
], ],
"analyticsEnabled": "false", "analyticsEnabled": "false",
"groupingEnabled": "false", "groupingEnabled": "false",

@ -120,7 +120,7 @@
-d '{ "applicationName":"testme", "isAllowedToAllDomains":false, "tags":["device_agent"]}'</code> -d '{ "applicationName":"testme", "isAllowedToAllDomains":false, "tags":["device_agent"]}'</code>
</li> </li>
<li class="padding-top-double"><span><h4 class="uppercase">Generate Token</h4></span> <li class="padding-top-double"><span><h4 class="uppercase">Generate Token</h4></span>
<code>curl -k -d "grant_type=password&username=%username%&password=%password%&scope=perm:device:enroll perm:device:disenroll perm:device:modify perm:device:operations perm:device:publish-event" <code>curl -k -d "grant_type=password&username=%username%&password=%password%&scope=dm:device:enroll dm:device:disenroll dm:device:modify dm:ops:view dm:device:event:publish"
-H "Authorization: Basic Base64(client_id:client_secret)" -H "Authorization: Basic Base64(client_id:client_secret)"
-H "Content-Type: application/x-www-form-urlencoded" {{httpsGateway}}/token</code> -H "Content-Type: application/x-www-form-urlencoded" {{httpsGateway}}/token</code>
</li> </li>

@ -63,7 +63,7 @@ import javax.ws.rs.core.Response;
@Scope( @Scope(
name = "View configurations", name = "View configurations",
description = "", description = "",
key = "perm:sms-handler:view-configuration", key = "conf:sms-handler:view",
roles = {"Internal/devicemgt-user"}, roles = {"Internal/devicemgt-user"},
permissions = {"/sms-handler/platform-configurations/view"} permissions = {"/sms-handler/platform-configurations/view"}
) )
@ -79,7 +79,7 @@ public interface ConfigurationManagementService {
tags = "SMS Configuration Management", tags = "SMS Configuration Management",
extensions = { extensions = {
@Extension(properties = { @Extension(properties = {
@ExtensionProperty(name = SMSHandlerConstants.SCOPE, value = "perm:sms-handler:view-configuration") @ExtensionProperty(name = SMSHandlerConstants.SCOPE, value = "conf:sms-handler:view")
}) })
} }
) )

@ -173,200 +173,203 @@
<AllowToAllDomains>true</AllowToAllDomains> <AllowToAllDomains>true</AllowToAllDomains>
</AppRegistration> </AppRegistration>
<Scopes> <Scopes>
<Scope>perm:grafana:api:view</Scope> <Scope>grafana:api:view</Scope>
<Scope>perm:app:review:view</Scope> <Scope>am:store:app:review:view</Scope>
<Scope>perm:app:review:update</Scope> <Scope>am:store:app:review:update</Scope>
<Scope>perm:app:publisher:service-provider:view</Scope> <Scope>am:pub:sp:app:view</Scope>
<Scope>perm:app:publisher:service-provider:create</Scope> <Scope>am:pub:sp:create</Scope>
<Scope>perm:app:publisher:service-provider:attach</Scope> <Scope>am:pub:sp:attach</Scope>
<Scope>perm:app:publisher:service-provider:detach</Scope> <Scope>am:pub:sp:detach</Scope>
<Scope>perm:app:publisher:service-provider:connect</Scope> <Scope>am:pub:sp:connect</Scope>
<Scope>perm:app:publisher:view</Scope> <Scope>am:pub:app:view</Scope>
<Scope>perm:app:publisher:update</Scope> <Scope>am:pub:app:update</Scope>
<Scope>perm:app:store:view</Scope> <Scope>am:store:app:view</Scope>
<Scope>perm:app:store:modify</Scope> <Scope>am:store:app:modify</Scope>
<Scope>perm:app:subscription:install</Scope> <Scope>am:store:app:sub:install</Scope>
<Scope>perm:app:subscription:uninstall</Scope> <Scope>am:store:app:sub:uninstall</Scope>
<Scope>perm:admin:app:review:update</Scope> <Scope>am:admin:pub:app:review:update</Scope>
<Scope>perm:admin:app:review:view</Scope> <Scope>am:admin:pub:app:review:view</Scope>
<Scope>perm:admin:app:publisher:update</Scope> <Scope>am:admin:pub:app:update</Scope>
<Scope>perm:admin:app:review:update</Scope> <Scope>am:admin:store:app:review:update</Scope>
<Scope>perm:admin:app:subscription:view</Scope> <Scope>am:admin:store:app:sub:view</Scope>
<Scope>perm:admin:app:subscription:modify</Scope> <Scope>am:admin:store:app:sub:modify</Scope>
<Scope>perm:device-types:types</Scope> <Scope>dm:device-type:view</Scope>
<Scope>perm:enterprise:modify</Scope> <Scope>and:enterprise:modify</Scope>
<Scope>perm:enterprise:view</Scope> <Scope>and:enterprise:view</Scope>
<Scope>perm:android-work:customer</Scope> <Scope>and:work:customer</Scope>
<Scope>perm:android-work:admin</Scope> <Scope>and:work:admin</Scope>
<Scope>perm:application-command:modify</Scope> <Scope>app:command:modify</Scope>
<Scope>perm:sign-csr</Scope> <Scope>dm:sign-csr</Scope>
<Scope>perm:admin:devices:view</Scope> <Scope>dm:admin:devices:view</Scope>
<Scope>perm:admin:topics:view</Scope> <Scope>dm:admin:topics:view</Scope>
<Scope>perm:roles:add</Scope> <Scope>rm:roles:add</Scope>
<Scope>perm:roles:add-users</Scope> <Scope>rm:users:add</Scope>
<Scope>perm:roles:update</Scope> <Scope>rm:roles:update</Scope>
<Scope>perm:roles:permissions</Scope> <Scope>rm:roles:permissions:view</Scope>
<Scope>perm:roles:details</Scope> <Scope>rm:roles:details:view</Scope>
<Scope>perm:roles:view</Scope> <Scope>rm:roles:view</Scope>
<Scope>perm:roles:create-combined-role</Scope> <Scope>rm:roles:combined:add</Scope>
<Scope>perm:roles:delete</Scope> <Scope>rm:roles:delete</Scope>
<Scope>perm:dashboard:vulnerabilities</Scope> <Scope>an:db:vulnerabilities</Scope>
<Scope>perm:dashboard:non-compliant-count</Scope> <Scope>an:db:non-compliant:count</Scope>
<Scope>perm:dashboard:non-compliant</Scope> <Scope>an:db:non-compliant</Scope>
<Scope>perm:dashboard:by-groups</Scope> <Scope>an:db:by-groups</Scope>
<Scope>perm:dashboard:device-counts</Scope> <Scope>an:db:device:count</Scope>
<Scope>perm:dashboard:feature-non-compliant</Scope> <Scope>an:db:feature-non-compliant</Scope>
<Scope>perm:dashboard:count-overview</Scope> <Scope>an:db:overview:count</Scope>
<Scope>perm:dashboard:filtered-count</Scope> <Scope>an:db:filtered-count</Scope>
<Scope>perm:dashboard:details</Scope> <Scope>an:db:details</Scope>
<Scope>perm:get-activity</Scope> <Scope>dm:activity:get</Scope>
<Scope>perm:devices:delete</Scope> <Scope>dm:devices:delete</Scope>
<Scope>perm:devices:applications</Scope> <Scope>dm:devices:app:view</Scope>
<Scope>perm:devices:effective-policy</Scope> <Scope>dm:devices:policy:view</Scope>
<Scope>perm:devices:compliance-data</Scope> <Scope>dm:devices:compliance:view</Scope>
<Scope>perm:devices:features</Scope> <Scope>dm:devices:features:view</Scope>
<Scope>perm:devices:operations</Scope> <Scope>dm:devices:ops:view</Scope>
<Scope>perm:devices:search</Scope> <Scope>dm:devices:search</Scope>
<Scope>perm:devices:details</Scope> <Scope>dm:devices:details</Scope>
<Scope>perm:devices:update</Scope> <Scope>dm:devices:update</Scope>
<Scope>perm:devices:view</Scope> <Scope>dm:devices:view</Scope>
<Scope>perm:devices:enrollment-guide:view</Scope> <Scope>dm:devices:enrollment-guide:view</Scope>
<Scope>perm:view-configuration</Scope> <Scope>rep:devices:view</Scope>
<Scope>perm:manage-configuration</Scope> <Scope>dm:conf:view</Scope>
<Scope>perm:policies:remove</Scope> <Scope>dm:conf:manage</Scope>
<Scope>perm:policies:priorities</Scope> <Scope>pm:policies:remove</Scope>
<Scope>perm:policies:deactivate</Scope> <Scope>pm:policies:priorities:update</Scope>
<Scope>perm:policies:get-policy-details</Scope> <Scope>pm:policies:deactivate</Scope>
<Scope>perm:policies:manage</Scope> <Scope>pm:policies:details:view</Scope>
<Scope>perm:policies:activate</Scope> <Scope>pm:policies:add</Scope>
<Scope>perm:policies:update</Scope> <Scope>pm:policies:activate</Scope>
<Scope>perm:policies:changes</Scope> <Scope>pm:policies:update</Scope>
<Scope>perm:policies:get-details</Scope> <Scope>pm:policies:change</Scope>
<Scope>perm:users:add</Scope> <Scope>pm:policies:view</Scope>
<Scope>perm:users:details</Scope> <Scope>dm:device-type:policies:view</Scope>
<Scope>perm:users:count</Scope> <Scope>um:users:add</Scope>
<Scope>perm:users:delete</Scope> <Scope>um:users:details:view</Scope>
<Scope>perm:users:roles</Scope> <Scope>um:users:count</Scope>
<Scope>perm:users:user-details</Scope> <Scope>um:users:delete</Scope>
<Scope>perm:users:credentials</Scope> <Scope>um:roles:view</Scope>
<Scope>perm:users:search</Scope> <Scope>um:users:user-details:view</Scope>
<Scope>perm:users:is-exist</Scope> <Scope>um:users:cred:change</Scope>
<Scope>perm:users:update</Scope> <Scope>um:users:search</Scope>
<Scope>perm:users:send-invitation</Scope> <Scope>um:users:is-exist</Scope>
<Scope>perm:admin-users:view</Scope> <Scope>um:users:update</Scope>
<Scope>perm:admin:devices:update-enrollment</Scope> <Scope>um:users:invite</Scope>
<Scope>perm:groups:devices</Scope> <Scope>um:admin:users:view</Scope>
<Scope>perm:groups:update</Scope> <Scope>um:activity:get</Scope>
<Scope>perm:groups:add</Scope> <Scope>dm:admin:enrollment:update</Scope>
<Scope>perm:groups:device</Scope> <Scope>gm:devices:view</Scope>
<Scope>perm:groups:devices-count</Scope> <Scope>gm:groups:update</Scope>
<Scope>perm:groups:devices-types</Scope> <Scope>gm:groups:add</Scope>
<Scope>perm:groups:remove</Scope> <Scope>gm:groups:device:view</Scope>
<Scope>perm:groups:groups</Scope> <Scope>gm:devices:count</Scope>
<Scope>perm:groups:groups-view</Scope> <Scope>gm:devices-types:view</Scope>
<Scope>perm:groups:share</Scope> <Scope>gm:groups:remove</Scope>
<Scope>perm:groups:count</Scope> <Scope>gm:groups:view</Scope>
<Scope>perm:groups:roles</Scope> <Scope>gm:groups:groups-view</Scope>
<Scope>perm:groups:devices-remove</Scope> <Scope>gm:roles:share</Scope>
<Scope>perm:groups:devices-add</Scope> <Scope>gm:groups:count</Scope>
<Scope>perm:groups:assign</Scope> <Scope>gm:roles:view</Scope>
<Scope>perm:device-types:configs</Scope> <Scope>gm:devices:remove</Scope>
<Scope>perm:device-types:features</Scope> <Scope>gm:devices:add</Scope>
<Scope>perm:device-types:types</Scope> <Scope>gm:devices:assign</Scope>
<Scope>perm:applications:install</Scope> <Scope>dm:device-type:conf:view</Scope>
<Scope>perm:applications:uninstall</Scope> <Scope>dm:device-type:features:view</Scope>
<Scope>perm:admin-groups:count</Scope> <Scope>dm:device-type:view</Scope>
<Scope>perm:admin-groups:view</Scope> <Scope>am:admin:app:install</Scope>
<Scope>perm:admin-groups:add</Scope> <Scope>am:admin:app:uninstall</Scope>
<Scope>perm:notifications:mark-checked</Scope> <Scope>gm:admin:groups:count</Scope>
<Scope>perm:notifications:view</Scope> <Scope>gm:admin:groups:view</Scope>
<Scope>perm:admin:certificates:delete</Scope> <Scope>gm:admin:groups:add</Scope>
<Scope>perm:admin:certificates:details</Scope> <Scope>dm:notif:mark-checked</Scope>
<Scope>perm:admin:certificates:view</Scope> <Scope>dm:notifications:view</Scope>
<Scope>perm:admin:certificates:add</Scope> <Scope>cm:cert:delete</Scope>
<Scope>perm:admin:certificates:verify</Scope> <Scope>cm:cert:details:get</Scope>
<Scope>perm:admin</Scope> <Scope>cm:cert:view</Scope>
<Scope>perm:devicetype:deployment</Scope> <Scope>cm:cert:add</Scope>
<Scope>perm:device-types:events</Scope> <Scope>cm:cert:verify</Scope>
<Scope>perm:device-types:events:view</Scope> <Scope>dm:admin</Scope>
<Scope>perm:admin:device-type</Scope> <Scope>dm:device-type:deploy</Scope>
<Scope>perm:admin:device-type:view</Scope> <Scope>dm:device-type:event:modify</Scope>
<Scope>perm:admin:device-type:configs</Scope> <Scope>dm:device-type:event:view</Scope>
<Scope>perm:device:enroll</Scope> <Scope>dm:admin:device-type:modify</Scope>
<Scope>perm:geo-service:analytics-view</Scope> <Scope>dm:admin:device-type:view</Scope>
<Scope>perm:geo-service:alerts-manage</Scope> <Scope>dm:admin:device-type:conf:add</Scope>
<Scope>dm:device:enroll</Scope>
<Scope>dm:geo:an:view</Scope>
<Scope>dm:geo:alerts:manage</Scope>
<Scope>appm:read</Scope> <Scope>appm:read</Scope>
<Scope>perm:devices:permanent-delete</Scope> <Scope>dm:admin:devices:permanent-delete</Scope>
<Scope>perm:android:manage-configuration</Scope> <Scope>and:conf:manage</Scope>
<Scope>perm:android:view-configuration</Scope> <Scope>and:conf:view</Scope>
<Scope>perm:user:permission-view</Scope> <Scope>um:users:permission:view</Scope>
<Scope>perm:ios:view-configuration</Scope> <Scope>ios:conf:view</Scope>
<Scope>perm:ios:manage-configuration</Scope> <Scope>ios:conf:manage</Scope>
<Scope>perm:ios:dep-view</Scope> <Scope>ios:dep:view</Scope>
<Scope>perm:ios:dep-add</Scope> <Scope>ios:dep:add</Scope>
<Scope>perm:windows:view-configuration</Scope> <Scope>win:conf:view</Scope>
<Scope>perm:windows:manage-configuration</Scope> <Scope>win:conf:manage</Scope>
<Scope>perm:android:lock-devices</Scope> <Scope>and:ops:lock-devices</Scope>
<Scope>perm:android:unlock-devices</Scope> <Scope>and:ops:unlock-devices</Scope>
<Scope>perm:android:location</Scope> <Scope>and:ops:location</Scope>
<Scope>perm:android:clear-password</Scope> <Scope>and:ops:clear-password</Scope>
<Scope>perm:android:control-camera</Scope> <Scope>and:ops:control-camera</Scope>
<Scope>perm:android:enterprise-wipe</Scope> <Scope>and:ops:enterprise-wipe</Scope>
<Scope>perm:android:wipe</Scope> <Scope>and:ops:wipe</Scope>
<Scope>perm:android:ring</Scope> <Scope>and:ops:ring</Scope>
<Scope>perm:android:applications</Scope> <Scope>and:ops:app-list</Scope>
<Scope>perm:android:reboot</Scope> <Scope>and:ops:reboot</Scope>
<Scope>perm:android:change-LockTask</Scope> <Scope>and:ops:change-LockTask</Scope>
<Scope>perm:android:mute</Scope> <Scope>and:ops:mute</Scope>
<Scope>perm:android:configure-display-message</Scope> <Scope>and:ops:conf-display-msg</Scope>
<Scope>perm:android:send-app-restrictions</Scope> <Scope>and:ops:send-app-restrictions</Scope>
<Scope>perm:android:file-transfer</Scope> <Scope>and:ops:file-transfer</Scope>
<Scope>perm:android:set-webclip</Scope> <Scope>and:ops:set-webclip</Scope>
<Scope>perm:android:set-password-policy</Scope> <Scope>and:ops:password-policy</Scope>
<Scope>perm:android:change-lock-code</Scope> <Scope>and:ops:change-lock-code</Scope>
<Scope>perm:android:upgrade-firmware</Scope> <Scope>and:ops:upgrade-firmware</Scope>
<Scope>perm:android:send-notification</Scope> <Scope>and:ops:send-notif</Scope>
<Scope>perm:geo-service:geo-fence</Scope> <Scope>dm:geo:geo-fence:manage</Scope>
<Scope>perm:whitelabel:view</Scope> <Scope>dm:whitelable:view</Scope>
<Scope>perm:whitelabel:update</Scope> <Scope>dm:whitelable:update</Scope>
<Scope>perm:metadata:view</Scope> <Scope>dm:metadata:view</Scope>
<Scope>perm:metadata:create</Scope> <Scope>dm:metadata:create</Scope>
<Scope>perm:metadata:update</Scope> <Scope>dm:metadata:update</Scope>
<Scope>perm:android:google-account</Scope> <Scope>and:ops:add-google-acc</Scope>
<Scope>perm:android:update-default-sim</Scope> <Scope>and:ops:update-default-sim</Scope>
<Scope>perm:android:google-account</Scope> <Scope>and:ops:add-google-acc</Scope>
<Scope>perm:android:info</Scope> <Scope>and:ops:device-info</Scope>
<Scope>perm:windows:lock-devices</Scope> <Scope>win:ops:lock-devices</Scope>
<Scope>perm:windows:enroll</Scope> <Scope>win:devices:enroll</Scope>
<Scope>perm:windows:disenroll</Scope> <Scope>win:ops:disenroll</Scope>
<Scope>perm:windows:wipe</Scope> <Scope>win:ops:wipe</Scope>
<Scope>perm:windows:ring</Scope> <Scope>win:ops:ring</Scope>
<Scope>perm:windows:lock-reset</Scope> <Scope>win:ops:lock-reset</Scope>
<Scope>perm:windows:reboot</Scope> <Scope>win:ops:reboot</Scope>
<Scope>perm:windows:location</Scope> <Scope>win:ops:location</Scope>
<Scope>perm:admin:tenant:view</Scope> <Scope>admin:tenant:view</Scope>
<Scope>perm:admin:metadata:view</Scope> <Scope>dm:admin:metadata:view</Scope>
<Scope>perm:admin:usage:view</Scope> <Scope>dm:admin:devices:usage:view</Scope>
<Scope>perm:android:clear-application</Scope> <Scope>and:ops:clear-app</Scope>
<Scope>perm:android:suspend-package</Scope> <Scope>and:ops:suspend-package</Scope>
<Scope>perm:android:alternate-install</Scope> <Scope>and:ops:alternate-install</Scope>
<Scope>perm:ios:lock</Scope> <Scope>ios:ops:lock</Scope>
<Scope>perm:ios:location</Scope> <Scope>ios:ops:location</Scope>
<Scope>perm:ios:ring</Scope> <Scope>ios:ops:ring</Scope>
<Scope>perm:ios:clear-passcode</Scope> <Scope>ios:ops:clear-passcode</Scope>
<Scope>perm:ios:enterprise-wipe</Scope> <Scope>ios:ops:enterprise-wipe</Scope>
<Scope>perm:ios:notification</Scope> <Scope>ios:ops:notif</Scope>
<Scope>perm:ios:wipe-data</Scope> <Scope>ios:ops:wipe</Scope>
<Scope>perm:ios:boolean-setting</Scope> <Scope>ios:ops:boolean-setting</Scope>
<Scope>perm:ios:wallpaper</Scope> <Scope>ios:ops:wallpaper</Scope>
<Scope>perm:ios:app-attributes</Scope> <Scope>ios:ops:app-attributes</Scope>
<Scope>perm:ios:app-configurations</Scope> <Scope>ios:ops:app-conf</Scope>
<Scope>perm:mac-os:restart</Scope> <Scope>mac:ops:restart</Scope>
<Scope>perm:mac-os:shut-down</Scope> <Scope>mac:ops:shutdown</Scope>
<Scope>perm:app:vpp:user:modify</Scope> <Scope>am:store:vpp:user:modify</Scope>
<Scope>perm:app:vpp:user:view</Scope> <Scope>am:store:vpp:user:view</Scope>
<Scope>perm:app:vpp:asset:modify</Scope> <Scope>am:store:vpp:assets:modify</Scope>
<Scope>perm:app:vpp:asset:view</Scope> <Scope>am:store:vpp:assets:view</Scope>
</Scopes> </Scopes>
<SSOConfiguration> <SSOConfiguration>
<Issuer>device-mgt</Issuer> <Issuer>device-mgt</Issuer>

Loading…
Cancel
Save