guanghu-ice-heart/server-tools/lake-lamp-authz/approvers.example.json

24 lines
865 B
JSON

{
"schema": "guanghu.approver-registry/v1",
"approvers": [
{
"id": "sovereign-owner",
"email": "SET_IN_PRIVATE_SERVER_FILE",
"default": true,
"persona_ids": ["ICE-GL-ZY001"],
"roles": ["fifth-domain-publisher", "node-owner"],
"targets": ["JD-FD-PRIMARY", "BS-GZ-006", "BS-SH-005", "BS-SG-001", "BS-SG-002", "BS-SG-003", "ZY-SG-006"],
"scopes": ["server-login", "server-ops", "repo-push"]
},
{
"id": "technical-controller",
"email": "SET_IN_PRIVATE_SERVER_FILE",
"default": false,
"persona_ids": ["SET_IN_PRIVATE_SERVER_FILE"],
"roles": ["zero-sense-technical-controller"],
"targets": ["JD-FD-PRIMARY"],
"scopes": ["server-login", "server-ops"]
}
],
"selection": "match target and scope on the server; a requester may never supply or override a recipient"
}