users.yaml

authz:
  anonymous_policies: []
  resources:
  - name: sower
  - name: workspace
    description: resource representing the workspace
  - name: data_file
    description: resource representing data uploads
  - name: mds_gateway
    description: commons /mds-admin
  - name: services
    subresources:
    - name: sheepdog
      subresources:
      - name: submission
        subresources:
        - name: program
        - name: project
  - name: open
  - name: programs
    subresources:
    - name: program1
      subresources:
      - name: projects
        subresources:
        - name: simulated
        - name: simulated2
        - name: AusDiab
        - name: FIELD
        - name: BioHEART-CT
        - name: test1
        - name: test2
        - name: test3
    - name: jnkns
      description: Jenkins Testing Projects
      subresources:
      - name: projects
        subresources:
        - name: jenkins
  roles:
  - id: upload_files
    permissions:
    - id: file_upload
      action:
        service: fence
        method: file_upload
  - id: access_workspace
    permissions:
    - id: workspace_access
      action:
        service: jupyterhub
        method: access
  - id: administrate_sheepdog
    description: CRUD access to programs and projects
    permissions:
    - id: sheepdog_admin_action
      action:
        service: sheepdog
        method: '*'
  - id: access_metadata_service
    permissions:
    - id: mds_access
      action:
        service: mds_gateway
        method: access
  - id: administrate_indexd
    description: full access to indexd API
    permissions:
    - id: indexd_admin
      action:
        service: indexd
        method: '*'
  - id: admin
    permissions:
    - id: admin
      action:
        service: '*'
        method: '*'
  - id: creator
    permissions:
    - id: creator
      action:
        service: '*'
        method: create
  - id: reader
    permissions:
    - id: reader
      action:
        service: '*'
        method: read
  - id: updater
    permissions:
    - id: updater
      action:
        service: '*'
        method: update
  - id: deleter
    permissions:
    - id: deleter
      action:
        service: '*'
        method: delete
  - id: storage_writer
    permissions:
    - id: storage_creator
      action:
        service: '*'
        method: write-storage
  - id: storage_reader
    permissions:
    - id: storage_reader
      action:
        service: '*'
        method: read-storage
  - id: access_sower
    permissions:
    - id: sower_access
      action:
        method: access
        service: job
  policies:
  - id: access_workspace
    description: be able to use workspace
    role_ids:
    - access_workspace
    resource_paths:
    - /workspace
  - id: data_upload
    description: upload raw data files to S3
    role_ids:
    - upload_files
    resource_paths:
    - /data_file
  - id: program_project_admin
    description: CRUD access to programs and projects
    role_ids:
    - administrate_sheepdog
    resource_paths:
    - /services/sheepdog/submission/program
    - /services/sheepdog/submission/project
  - id: metadata_service_user
    description: be able to use metadata service
    role_ids:
    - access_metadata_service
    resource_paths:
    - /mds_gateway
  - id: indexd_admin
    description: full access to indexd API
    role_ids:
    - administrate_indexd
    resource_paths:
    - /programs
  - id: open_data_reader
    role_ids:
    - reader
    - storage_reader
    resource_paths:
    - /open
  - id: sower_user
    description: be able to user sower
    role_ids:
    - access_sower
    resource_paths:
    - /sower
  - id: all_programs_reader
    role_ids:
    - reader
    - storage_reader
    resource_paths:
    - /programs
  - id: jenkins
    role_ids:
    - creator
    - reader
    - updater
    - deleter
    - storage_writer
    - storage_reader
    resource_paths:
    - /programs/jnkns
    - /programs/jnkns/projects/jenkins
  - id: program1
    role_ids:
    - creator
    - reader
    - updater
    - deleter
    - storage_writer
    - storage_reader
    resource_paths:
    - /programs/program1
  - id: program1_simulated
    role_ids:
    - creator
    - reader
    - updater
    - deleter
    - storage_writer
    - storage_reader
    resource_paths:
    - /programs/program1/projects/simulated
  - id: program1_simulated2
    role_ids:
    - creator
    - reader
    - updater
    - deleter
    - storage_writer
    - storage_reader
    resource_paths:
    - /programs/program1/projects/simulated2
  - id: program1_ausdiab
    role_ids:
    - creator
    - reader
    - updater
    - deleter
    - storage_writer
    - storage_reader
    resource_paths:
    - /programs/program1/projects/AusDiab
  - id: program1_field
    role_ids:
    - creator
    - reader
    - updater
    - deleter
    - storage_writer
    - storage_reader
    resource_paths:
    - /programs/program1/projects/FIELD
  - id: program1_bioheart_ct
    role_ids:
    - creator
    - reader
    - updater
    - deleter
    - storage_writer
    - storage_reader
    resource_paths:
    - /programs/program1/projects/BioHEART-CT
  - id: program1_test1
    role_ids:
    - creator
    - reader
    - updater
    - deleter
    - storage_writer
    - storage_reader
    resource_paths:
    - /programs/program1/projects/test1
  - id: program1_test2
    role_ids:
    - creator
    - reader
    - updater
    - deleter
    - storage_writer
    - storage_reader
    resource_paths:
    - /programs/program1/projects/test2
  - id: program1_test3
    role_ids:
    - creator
    - reader
    - updater
    - deleter
    - storage_writer
    - storage_reader
    resource_paths:
    - /programs/program1/projects/test3
  all_users_policies:
  - program1_test1
  groups:
  - name: data_uploader
    policies:
    - data_upload
    - program_project_admin
    - metadata_service_user
    users:
    - uwe@biocommons.org.au
    - marion@biocommons.org.au
    - uwe.winter
    - marion.shadbolt
  - name: indexd_admin
    policies:
    - indexd_admin
    users:
    - uwe@biocommons.org.au
    - marion@biocommons.org.au
    - uwe.winter
    - marion.shadbolt
  - name: program1_owners
    policies:
    - program1_simulated
    - program1_simulated2
    - program1_ausdiab
    - program1_field
    - program1_bioheart_ct
    - program1_test1
    users:
    - uwwint@gmail.com
    - uwe@biocommons.org.au
    - marion@biocommons.org.au
    - bernie@biocommons.org.au
    - tungvnguyen729@gmail.com
    - jeanyusyd@gmail.com
    - steven@biocommons.org.au
    - jeff@biocommons.org.au
    - jess@biocommons.org.au
    - christina@biocommons.org.au
    - melissa@biocommons.org.au
    - andrew@biocommons.org.au
    - nigel@biocommons.org.au
    - rhys@biocommons.org.au
    - sarah@biocommons.org.au
    - tiff@biocommons.org.au
    - johan@biocommons.org.au
    - fiona@biocommons.org.au
    - pmeikle60@gmail.com
    - farah@biocommons.org.au
    - uwe.winter
    - marion.shadbolt
  - name: workspace_user
    policies:
    - access_workspace
    users:
    - uwwint@gmail.com
    - uwe@biocommons.org.au
    - marion@biocommons.org.au
    - bernie@biocommons.org.au
    - tungvnguyen729@gmail.com
    - jeanyusyd@gmail.com
    - steven@biocommons.org.au
    - jeff@biocommons.org.au
    - jess@biocommons.org.au
    - christina@biocommons.org.au
    - melissa@biocommons.org.au
    - andrew@biocommons.org.au
    - nigel@biocommons.org.au
    - rhys@biocommons.org.au
    - sarah@biocommons.org.au
    - tiff@biocommons.org.au
    - johan@biocommons.org.au
    - fiona@biocommons.org.au
    - pmeikle60@gmail.com
    - farah@biocommons.org.au
users:
  uwwint@gmail.com:
    tags:
      name: Uwe Winter
    policies: []
  uwe@biocommons.org.au:
    tags:
      name: Uwe Winter
    policies: []
  marion@biocommons.org.au:
    tags:
      name: Marion Shadbolt
    policies: []
  bernie@biocommons.org.au:
    tags:
      name: Bernie Pope
    policies: []
  tungvnguyen729@gmail.com:
    tags:
      name: Tung Nguyen
    policies: []
  jeanyusyd@gmail.com:
    tags:
      name: Jean Yang
    policies: []
  steven@biocommons.org.au:
    tags:
      name: Steven Manos
    policies: []
  jeff@biocommons.org.au:
    tags:
      name: Jeff Christiansen
    policies: []
  jess@biocommons.org.au:
    tags:
      name: Jess Holliday
    policies: []
  christina@biocommons.org.au:
    tags:
      name: Christina Hall
    policies: []
  melissa@biocommons.org.au:
    tags:
      name: Melissa Burke
    policies: []
  andrew@biocommons.org.au:
    tags:
      name: Andrew Lonie
    policies: []
  nigel@biocommons.org.au:
    tags:
      name: Nigel Ward
    policies: []
  rhys@biocommons.org.au:
    tags:
      name: Rhys Francis
    policies: []
  sarah@biocommons.org.au:
    tags:
      name: Sarah Nisbet
    policies: []
  tiff@biocommons.org.au:
    tags:
      name: Tiff Nelson
    policies: []
  johan@biocommons.org.au:
    tags:
      name: Johan Gustaffson
    policies: []
  fiona@biocommons.org.au:
    tags:
      name: Fiona Kerr
    policies: []
  pmeikle60@gmail.com:
    tags:
      name: Peter Meikle
    policies: []
  farah@biocommons.org.au:
    tags:
      name: Farah Khan
    policies: []
  patrick.carnuccio:
    tags:
      name: Patrick Carnuccio
  uwe.winter:
    tags:
      name: Uwe Winter
  uwe.winter.1:
    tags:
      name: Uwe Winter
  marion.shadbolt:
    tags:
      name: Marion Shadbolt
  patrick.carnuccio.3:
    tags:
      name: Patrick Carnuccio