ロールベースのアクセス制御 (RBAC)#
Lagoon バージョン 1.0 では、プロジェクトへのアクセス方法が変更されました。プロジェクトへのアクセスはグループ経由で処理され、プロジェクトは 1 つまたは複数のグループに割り当てられます。ユーザーはロールを持つグループに追加されます。グループはサブグループ内にネストすることもできます。この変更により、柔軟性が大幅に向上し、Lagoon 内で実際のチームを再現できるようになります。
ロール#
ユーザーをグループに割り当てるときは、このグループ内でそのユーザーにグループ ロールを提供する必要があります。現在存在する 5 つのグループ ロールのそれぞれが、グループとグループに割り当てられたプロジェクトに対する異なる権限をユーザーに付与します。現在 Lagoon にあるプラットフォーム全体のロールとグループ ロールは次のとおりです。
プラットフォーム全体のロール#
プラットフォーム全体の管理者#
プラットフォーム全体の管理者は、Lagoon 全体のすべてにアクセスできます。これには、すべてのプロジェクトを削除するなどの危険な変更も含まれます。非常に、非常に、非常に**慎重に使用してください。
プラットフォーム全体の所有者#
プラットフォーム全体の所有者は、グループ所有者の役割と同様に、すべての Lagoon グループにアクセスでき、すべてのものにアクセスする必要があるユーザーが必要で、そのユーザーをすべてのグループに割り当てたくない場合に使用できます。
組織の所有者#
組織の所有者の役割により、組織内でプロジェクト、グループ、通知を作成および削除できます。
彼らはユーザーをグループに追加し、そのグループ内のユーザーの役割を変更し、プロジェクトをグループに関連付けることができます。これにより、組織のオーナーは誰がアクセス権を持っているかを明確に把握し、ユーザーを迅速に追加・削除することができます。
組織のオーナーは現在、直接Slackやその他の通知を作成し、それらの通知をLagoon管理者の助けを借りずにプロジェクトに関連付ける能力も持っています。
注意
デフォルトでは、この役割は組織のオーナーがプロジェクト内で環境を作成したり、デプロイをトリガーしたりすることを許可していません。彼らは自分自身を、その権限を付与する役割を持つグループに追加することができます。プロジェクトを作成するとき、組織のオーナーはプロジェクトのデフォルトグループのオーナーとして追加されることを選択できます。
組織のビューア#
組織のビューワーは、自組織内のプロジェクト、グループとユーザーのアクセス、通知を表示するアクセス権を持っています。
グループの役割#
オーナー#
オーナーの役割は、グループとその関連プロジェクト内で全てを行うことができます。彼らはグループのユーザーを追加し、管理することができます。 この役割には注意が必要です、なぜならプロジェクトや本番環境を削除することができるからです！
メンテナ#
メンテナの役割は、プロジェクト自体や本番環境を削除することを除いて、グループとその関連プロジェクト内で何でもできます。彼らはグループのユーザーを追加し、管理することができます。
開発者#
開発者の役割は、開発環境へのSSHアクセスのみを持っています。この役割では、本番環境にアクセスしたり、更新したり、削除したりすることはできません。彼らは本番環境をソースとして同期タスクを実行することができますが、宛先としてはできません。グループのユーザーを管理することはできません。
重要
この役割は、デプロイがGitのプッシュ経由でトリガーされるため、本番環境のデプロイを防ぎません！あなたはGitサーバーがこれらのユーザーが本番環境として定義されたブランチにプッシュするのを防ぐことを確認する必要があります。
レポーター#
レポーターの役割は、閲覧アクセスのみを持っています。彼らはSSH経由で環境にアクセスしたり、それらを変更したりすることはできません。彼らはキャッシュクリアタスクを実行することができます。この役割は主に、ステークホルダーがLagoon UIとログにアクセスできるようにするために使用されます。
ゲスト#
ゲストの役割は、上記のレポーターの役割と同等の権限を持っています。
以下はその表です。 彼らが持つ役割とアクセスをリストします:
Lagoon 1.0.0 RBAC 権限マトリックス#
| 名前 | リソース | スコープ | 属性 |
|---|---|---|---|
| addSshKey | ssh_key | add | userID |
| updateSshKey | ssh_key | update | userID |
| deleteSshKey | ssh_key | delete | userID |
| getUserSshKeys | ssh_key | view:user | userID |
| updateUser | user | update | userID |
| deleteUser | user | delete | userID |
| 名前 | リソース | スコープ | 属性 |
|---|---|---|---|
| getBackupsByEnvironmentId | deployment | view | projectID |
| getEnvironmentsByProjectId | environment | view | projectID |
| getEnvironmentServicesByEnvironmentId | environment | view | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:view:development | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:view:production | projectID |
| getEnvVarsByProjectId | env_var | project:view | projectID |
| addGroup | group | add | |
| getOpenshiftByProjectId | openshift | view | projectID |
| addProject | project | add | |
| getProjectByEnvironmentId | project | view | projectID |
| getProjectByGitUrl | project | view | projectID |
| getProjectByName | project | view | projectID |
| addRestore | restore | add | projectID |
| updateRestore | restore | update | projectID |
| taskDrushCacheClear | task | drushCacheClear:development | projectID |
| taskDrushCacheClear | task | drushCacheClear:production | projectID |
| taskDrushCron | task | drushCron:development | projectID |
| taskDrushCron | task | drushCron:production | projectID |
| getFilesByTaskId | task | view | projectID |
| getTasksByEnvironmentId | task | view | projectID |
| getTaskByRemoteId | task | view | projectID |
| getTaskById | task | view | projectID |
| addUser | user | add |
| 名前 | リソース | スコープ | 属性 |
|---|---|---|---|
| addBackup | backup | add | projectID |
| getBackupsByEnvironmentId | backup | view | projectID |
| addEnvVariable (to Environment) | env_var | environment:add:development | projectID |
| deleteEnvVariable (from Environment) | env_var | environment:delete:development | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:viewValue:development | projectID |
| addOrUpdateEnvironment | environment | addOrUpdate:development | projectID |
| updateEnvironment | environment | update:development | projectID |
| deleteEnvironment | environment | delete:development | projectID |
| addDeployment | environment | deploy:development | projectID |
| setEnvironmentServices | environment | update:development | projectID |
| deployEnvironmentLatest | environment | deploy:development | projectID |
| deployEnvironmentBranch | environment | deploy:development | projectID |
| deployEnvironmentPullrequest | environment | deploy:development | projectID |
| deployEnvironmentPromote | environment | deploy:development | projectID |
| userCanSshToEnvironment | environment | ssh:development | projectID |
| getNotificationsByProjectId | notification | view | projectID |
| addTask | task | add:development | projectID |
| taskDrushArchiveDump | task | drushArchiveDump:development | projectID |
| taskDrushArchiveDump | task | drushArchiveDump:production | projectID |
| taskDrushSqlDump | task | drushSqlDump:development | projectID |
| taskDrushSqlDump | task | drushSqlDump:production | projectID |
| taskDrushUserLogin | task | drushUserLogin:destination:development | environmentID |
| taskDrushSqlSync | task | drushSqlSync:source:development | projectID |
| taskDrushSqlSync | task | drushSqlSync:source:production | projectID |
| taskDrushSqlSync | task | drushSqlSync:destination:development | projectID |
| taskDrushRsyncFiles | task | drushRsync:source:development | projectID |
| taskDrushRsyncFiles | task | drushRsync:source:production | projectID |
| taskDrushRsyncFiles | task | drushRsync:destination:development | projectID |
| deleteTask | task | delete | projectID |
| updateTask | task | update | projectID |
| uploadFilesForTask | task | update | projectID |
| deleteFilesForTask | task | delete | projectID |
| getBackupsByEnvironmentId | deployment | view | projectID |
| getEnvironmentsByProjectId | environment | view | projectID |
| getEnvironmentServicesBy EnvironmentId |
environment | view | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:view:development | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:view:production | projectID |
| getEnvVarsByProjectId | env_var | project:view | projectID |
| addGroup | group | add | |
| getOpenshiftByProjectId | openshift | view | projectID |
| addProject | project | add | |
| getProjectByEnvironmentId | project | view | projectID |
| getProjectByGitUrl | project | view | projectID |
| getProjectByName | project | view | projectID |
| addRestore | restore | add | projectID |
| updateRestore | restore | update | projectID |
| taskDrushCacheClear | task | drushCacheClear:development | projectID |
| taskDrushCacheClear | task | drushCacheClear:production | projectID |
| taskDrushCron | task | drushCron:development | projectID |
| taskDrushCron | task | drushCron:production | projectID |
| getFilesByTaskId | task | view | projectID |
| getTasksByEnvironmentId | task | view | projectID |
| getTaskByRemoteId | task | view | projectID |
| getTaskById | task | view | projectID |
| addUser | user | add |
| 名前 | リソース | スコープ | 属性 |
|---|---|---|---|
| deleteBackup | backup | delete | projectID |
| addEnvVariable (to Project) | env_var | project:add | projectID |
| addEnvVariable (to Environment) | env_var | environment:add:production | projectID |
| deleteEnvVariable | env_var | delete | projectID |
| deleteEnvVariable (from Project) | env_var | project:delete | projectID |
| deleteEnvVariable (from Environment) | env_var | environment:delete:production | projectID |
| getEnvVarsByProjectId | env_var | project:viewValue | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:viewValue:production | projectID |
| addOrUpdateEnvironment | environment | addOrUpdate:production | projectID |
| updateEnvironment | environment | update:production | projectID |
| addDeployment | environment | deploy:production | projectID |
| deleteDeployment | deployment | delete | projectID |
| updateDeployment | deployment | update | projectID |
| setEnvironmentServices | environment | update:production | projectID |
| deployEnvironmentLatest | environment | deploy:production | projectID |
| deployEnvironmentBranch | environment | deploy:production | projectID |
| deployEnvironmentPullrequest | environment | deploy:production | projectID |
| deployEnvironmentPromote | environment | deploy:production | projectID |
| userCanSshToEnvironment | environment | ssh:production | projectID |
| updateGroup | group | update | groupID |
| deleteGroup | group | delete | groupID |
| addUserToGroup | group | addUser | groupID |
| removeUserFromGroup | group | removeUser | groupID |
| addNotificationToProject | project | addNotification | projectID |
| removeNotificationFromProject | project | removeNotification | projectID |
| updateProject | project | update | projectID |
| addGroupsToProject | project | addGroup | projectID |
| removeGroupsFromProject | project | removeGroup | projectID |
| addTask | task | add:production | projectID |
| taskDrushUserLogin | task | drushUserLogin:destination:production | environmentID |
| taskDrushSqlSync | task | drushSqlSync:destination:production | projectID |
| taskDrushRsyncFiles | task | drushRsync:destination:production | projectID |
| addBackup | backup | add | projectID |
| getBackupsByEnvironmentId | backup | view | projectID |
| addEnvVariable (to Environment) | env_var | environment:add:development | projectID |
| deleteEnvVariable (from Environment) | env_var | environment:delete:development | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:viewValue:development | projectID |
| addOrUpdateEnvironment | environment | addOrUpdate:development | projectID |
| updateEnvironment | environment | update:development | projectID |
| deleteEnvironment | environment | delete:development | projectID |
| addDeployment | environment | deploy:development | projectID |
| setEnvironmentServices | environment | update:development | projectID |
| deployEnvironmentLatest | environment | deploy:development | projectID |
| deployEnvironmentBranch | environment | deploy:development | projectID |
| deployEnvironmentPullrequest | environment | deploy:development | projectID |
| deployEnvironmentPromote | environment | deploy:development | projectID |
| getNotificationsByProjectId | notification | view | projectID |
| addTask | task | add:development | projectID |
| taskDrushArchiveDump | task | drushArchiveDump:development | projectID |
| taskDrushArchiveDump | task | drushArchiveDump:production | projectID |
| taskDrushSqlDump | task | drushSqlDump:development | projectID |
| taskDrushSqlDump | task | drushSqlDump:production | projectID |
| taskDrushUserLogin | task | drushUserLogin:destination:development | environmentID |
| taskDrushSqlSync | task | drushSqlSync:source:development | projectID |
| taskDrushSqlSync | task | drushSqlSync:source:production | projectID |
| taskDrushSqlSync | task | drushSqlSync:destination:development | projectID |
| taskDrushRsyncFiles | task | drushRsync:source:development | projectID |
| taskDrushRsyncFiles | task | drushRsync:source:production | projectID |
| taskDrushRsyncFiles | task | drushRsync:destination:development | projectID |
| deleteTask | task | delete | projectID |
| updateTask | task | update | projectID |
| uploadFilesForTask | task | update | projectID |
| deleteFilesForTask | task | delete | projectID |
| getBackupsByEnvironmentId | deployment | view | projectID |
| getEnvironmentsByProjectId | environment | view | projectID |
| getEnvironmentServicesBy EnvironmentId |
environment | view | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:view:development | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:view:production | projectID |
| getEnvVarsByProjectId | env_var | project:view | projectID |
| addGroup | group | add | |
| getOpenshiftByProjectId | openshift | view | projectID |
| addProject | project | add | |
| getProjectByEnvironmentId | project | view | projectID |
| getProjectByGitUrl | project | view | projectID |
| getProjectByName | project | view | projectID |
| addRestore | restore | add | projectID |
| updateRestore | restore | update | projectID |
| taskDrushCacheClear | task | drushCacheClear:development | projectID |
| taskDrushCacheClear | task | drushCacheClear:production | projectID |
| taskDrushCron | task | drushCron:development | projectID |
| taskDrushCron | task | drushCron:production | projectID |
| getFilesByTaskId | task | view | projectID |
| getTasksByEnvironmentId | task | view | projectID |
| getTaskByRemoteId | task | view | projectID |
| getTaskById | task | view | projectID |
| addUser | user | add |
| 名前 | リソース | スコープ | 属性 |
|---|---|---|---|
| deleteEnvironment | environment | delete:production | projectID |
| deleteProject | project | delete | projectID |
| getProjectByEnvironmentId | project | viewPrivateKey | projectID |
| getProjectByGitUrl | project | viewPrivateKey | projectID |
| getProjectByName | project | viewPrivateKey | projectID |
| deleteBackup | backup | delete | projectID |
| addEnvVariable (to Project) | env_var | project:add | projectID |
| addEnvVariable (to Environment) | env_var | environment:add:production | projectID |
| deleteEnvVariable | env_var | delete | projectID |
| deleteEnvVariable (from Project) | env_var | project:delete | projectID |
| deleteEnvVariable (from Environment) | env_var | environment:delete:production | projectID |
| getEnvVarsByProjectId | env_var | project:viewValue | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:viewValue:production | projectID |
| addOrUpdateEnvironment | environment | addOrUpdate:production | projectID |
| updateEnvironment | environment | update:production | projectID |
| addDeployment | environment | deploy:production | projectID |
| deleteDeployment | deployment | delete | projectID |
| updateDeployment | deployment | update | projectID |
| setEnvironmentServices | environment | update:production | projectID |
| deployEnvironmentLatest | environment | deploy:production | projectID |
| deployEnvironmentBranch | environment | deploy:production | projectID |
| deployEnvironmentPullrequest | environment | deploy:production | projectID |
| deployEnvironmentPromote | environment | deploy:production | projectID |
| updateGroup | group | update | groupID |
| deleteGroup | group | delete | groupID |
| addUserToGroup | group | addUser | groupID |
| removeUserFromGroup | group | removeUser | groupID |
| addNotificationToProject | project | addNotification | projectID |
| removeNotificationFromProject | project | removeNotification | projectID |
| updateProject | project | update | projectID |
| addGroupsToProject | project | addGroup | projectID |
| removeGroupsFromProject | project | removeGroup | projectID |
| addTask | task | add:production | projectID |
| taskDrushUserLogin | task | drushUserLogin:destination:production | environmentID |
| taskDrushSqlSync | task | drushSqlSync:destination:production | projectID |
| taskDrushRsyncFiles | task | drushRsync:destination:production | projectID |
| addBackup | backup | add | projectID |
| getBackupsByEnvironmentId | backup | view | projectID |
| addEnvVariable (to Environment) | env_var | environment:add:development | projectID |
| deleteEnvVariable (from Environment) | env_var | environment:delete:development | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:viewValue:development | projectID |
| addOrUpdateEnvironment | environment | addOrUpdate:development | projectID |
| updateEnvironment | environment | update:development | projectID |
| deleteEnvironment | environment | delete:development | projectID |
| addDeployment | environment | deploy:development | projectID |
| setEnvironmentServices | environment | update:development | projectID |
| deployEnvironmentLatest | environment | deploy:development | projectID |
| deployEnvironmentBranch | environment | deploy:development | projectID |
| deployEnvironmentPullrequest | environment | deploy:development | projectID |
| deployEnvironmentPromote | environment | deploy:development | projectID |
| getNotificationsByProjectId | notification | view | projectID |
| addTask | task | add:development | projectID |
| taskDrushArchiveDump | task | drushArchiveDump:development | projectID |
| taskDrushArchiveDump | task | drushArchiveDump:production | projectID |
| taskDrushSqlDump | task | drushSqlDump:development | projectID |
| taskDrushSqlDump | task | drushSqlDump:production | projectID |
| taskDrushUserLogin | task | drushUserLogin:destination:development | environmentID |
| taskDrushSqlSync | task | drushSqlSync:source:development | projectID |
| taskDrushSqlSync | task | drushSqlSync:source:production | projectID |
| taskDrushSqlSync | task | drushSqlSync:destination:development | projectID |
| taskDrushRsyncFiles | task | drushRsync:source:development | projectID |
| taskDrushRsyncFiles | task | drushRsync:source:production | projectID |
| taskDrushRsyncFiles | task | drushRsync:destination:development | projectID |
| deleteTask | task | delete | projectID |
| updateTask | task | update | projectID |
| uploadFilesForTask | task | update | projectID |
| deleteFilesForTask | task | delete | projectID |
| getBackupsByEnvironmentId | deployment | view | projectID |
| getEnvironmentsByProjectId | environment | view | projectID |
| getEnvironmentServices ByEnvironmentId |
environment | view | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:view:development | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:view:production | projectID |
| getEnvVarsByProjectId | env_var | project:view | projectID |
| addGroup | group | add | |
| getOpenshiftByProjectId | openshift | view | projectID |
| addProject | project | add | |
| getProjectByEnvironmentId | project | view | projectID |
| getProjectByGitUrl | project | view | projectID |
| getProjectByName | project | view | projectID |
| addRestore | restore | add | projectID |
| updateRestore | restore | update | projectID |
| taskDrushCacheClear | task | drushCacheClear:development | projectID |
| taskDrushCacheClear | task | drushCacheClear:production | projectID |
| taskDrushCron | task | drushCron:development | projectID |
| taskDrushCron | task | drushCron:production | projectID |
| getFilesByTaskId | task | view | projectID |
| getTasksByEnvironmentId | task | view | projectID |
| getTaskByRemoteId | task | view | projectID |
| getTaskById | task | view | projectID |
| addUser | user | add |
| 名前 | リソース | スコープ | 属性 |
|---|---|---|---|
| getOrganizationById | organization | view | organizationId |
| getProjectByEnvironmentId | organization | viewProject | organizationId |
| getGroupsByOrganizationId | organization | viewGroup | organizationId |
| getUsersByOrganizationId | organization | viewUsers | organizationId |
| getUserByEmailAndOrganizationId | organization | viewUser | organizationId |
| getNotificationsByOrganizationId | organization | viewNotification | organizationId |
| 名前 | リソース | スコープ | 属性 |
|---|---|---|---|
| getOrganizationById | organization | view | organizationId |
| getProjectByEnvironmentId | organization | viewProject | organizationId |
| getGroupsByOrganizationId | organization | viewGroup | organizationId |
| getUsersByOrganizationId | organization | viewUsers | organizationId |
| getUserByEmailAndOrganizationId | organization | viewUser | organizationId |
| getNotificationsByOrganizationId | organization | viewNotification | organizationId |
| addProject | organization | addProject | organizationId |
| updateProject | organization | updateProject | organizationId |
| deleteProject | organization | deleteProject | organizationId |
| addGroup | organization | addGroup | organizationId |
| deleteGroup | organization | removeGroup | organizationId |
| addNotificationSlack | organization | addNotification | organizationId |
| updateNotificationSlack | organization | updateNotification | organizationId |
| deleteNotificationSlack | organization | removeNotification | organizationId |
| addUserToOrganization | organization | addOwner | organizationId |
| addUserToOrganization | organization | addViewer | organizationId |
| updateOrganization | organization | updateOrganization | organizationId |
| 名前 | リソース | 範囲 | 属性 |
|---|---|---|---|
| addOrUpdateEnvironment Storage |
environment | storage | |
| addNotificationSlack | notification | add | |
| updateNotificationSlack | notification | update | |
| deleteNotificationSlack | notification | delete | |
| addKubernetes | kubernetes | add | |
| updateKubernetes | kubernetes | update | |
| deleteKubernetes | kubernetes | delete | |
| deleteAllKubernetes | kubernetes | deleteAll | |
| getAllOpenshifts | openshift | viewAll | |
| getAllProjects | project | viewAll | |
| addSshKey | ssh_key | add | userID |
| updateSshKey | ssh_key | update | userID |
| deleteSshKey | ssh_key | delete | userID |
| getUserSshKeys | ssh_key | view:user | userID |
| updateUser | user | update | userID |
| deleteUser | user | delete | userID |
| deleteEnvironment | environment | delete:production | projectID |
| deleteProject | project | delete | projectID |
| getProjectByEnvironmentId | project | viewPrivateKey | projectID |
| getProjectByGitUrl | project | viewPrivateKey | projectID |
| getProjectByName | project | viewPrivateKey | projectID |
| deleteBackup | backup | delete | projectID |
| addEnvVariable (to Project) | env_var | project:add | projectID |
| addEnvVariable (to Environment) | env_var | environment:add:production | projectID |
| deleteEnvVariable | env_var | delete | projectID |
| deleteEnvVariable (from Project) | env_var | project:delete | projectID |
| deleteEnvVariable (from Environment) | env_var | environment:delete:production | projectID |
| getEnvVarsByProjectId | env_var | project:viewValue | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:viewValue:production | projectID |
| addOrUpdateEnvironment | environment | addOrUpdate:production | projectID |
| updateEnvironment | environment | update:production | projectID |
| allEnvironments | environment | viewAll | |
| getEnvironmentStorageMonthBy EnvironmentId |
environment | storage | |
| getEnvironmentHoursMonthBy EnvironmentId |
environment | storage | |
| getEnvironmentHitsMonthBy EnvironmentId |
environment | storage | |
| addOrUpdateEnvironment Storage |
environment | storage | |
| addDeployment | environment | deploy:production | projectID |
| deleteDeployment | deployment | delete | projectID |
| updateDeployment | deployment | update | projectID |
| setEnvironmentServices | environment | update:production | projectID |
| deployEnvironmentLatest | environment | deploy:production | projectID |
| deployEnvironmentBranch | environment | deploy:production | projectID |
| deployEnvironmentPullrequest | environment | deploy:production | projectID |
| deployEnvironmentPromote | environment | deploy:production | projectID |
| updateGroup | group | update | groupID |
| deleteGroup | group | delete | groupID |
| addUserToGroup | group | addUser | groupID |
| removeUserFromGroup | group | removeUser | groupID |
| addNotificationToProject | project | addNotification | projectID |
| removeNotificationFromProject | project | removeNotification | projectID |
| updateProject | project | update | projectID |
| addGroupsToProject | project | addGroup | projectID |
| removeGroupsFromProject | project | removeGroup | projectID |
| addTask | task | add:production | projectID |
| taskDrushUserLogin | task | drushUserLogin:destination:production | environmentID |
| taskDrushSqlSync | task | drushSqlSync:destination:production | projectID |
| taskDrushRsyncFiles | task | drushRsync:destination:production | projectID |
| addBackup | backup | add | projectID |
| getBackupsByEnvironmentId | backup | view | projectID |
| addEnvVariable (to Environment) | env_var | environment:add:development | projectID |
| deleteEnvVariable (from Environment) | env_var | environment:delete:development | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:viewValue:development | projectID |
| addOrUpdateEnvironment | environment | addOrUpdate:development | projectID |
| updateEnvironment | environment | update:development | projectID |
| deleteEnvironment | environment | delete:development | projectID |
| addDeployment | environment | deploy:development | projectID |
| setEnvironmentServices | environment | update:development | projectID |
| deployEnvironmentLatest | environment | deploy:development | projectID |
| deployEnvironmentBranch | environment | deploy:development | projectID |
| deployEnvironmentPullrequest | environment | deploy:development | projectID |
| deployEnvironmentPromote | environment | deploy:development | projectID |
| getNotificationsByProjectId | notification | view | projectID |
| addTask | task | add:development | projectID |
| taskDrushArchiveDump | task | drushArchiveDump:development | projectID |
| taskDrushArchiveDump | task | drushArchiveDump:production | projectID |
| taskDrushSqlDump | task | drushSqlDump:development | projectID |
| taskDrushSqlDump | task | drushSqlDump:production | projectID |
| taskDrushUserLogin | task | drushUserLogin:destination:development | environmentID |
| taskDrushSqlSync | task | drushSqlSync:source:development | projectID |
| taskDrushSqlSync | task | drushSqlSync:source:production | projectID |
| taskDrushSqlSync | task | drushSqlSync:destination:development | projectID |
| taskDrushRsyncFiles | task | drushRsync:source:development | projectID |
| taskDrushRsyncFiles | task | drushRsync:source:production | projectID |
| taskDrushRsyncFiles | task | drushRsync:destination:development | projectID |
| deleteTask | task | delete | projectID |
| updateTask | task | update | projectID |
| uploadFilesForTask | task | update | projectID |
| deleteFilesForTask | task | delete | projectID |
| getBackupsByEnvironmentId | deployment | view | projectID |
| getEnvironmentsByProjectId | environment | view | projectID |
| getEnvironmentServices ByEnvironmentId |
environment | view | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:view:development | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:view:production | projectID |
| getEnvVarsByProjectId | env_var | project:view | projectID |
| addGroup | group | add | |
| getOpenshiftByProjectId | openshift | view | projectID |
| addProject | project | add | |
| getProjectByEnvironmentId | project | view | projectID |
| getProjectByGitUrl | project | view | projectID |
| getProjectByName | project | view | projectID |
| addRestore | restore | add | projectID |
| updateRestore | restore | update | projectID |
| taskDrushCacheClear | task | drushCacheClear:development | projectID |
| taskDrushCacheClear | task | drushCacheClear:production | projectID |
| taskDrushCron | task | drushCron:development | projectID |
| taskDrushCron | task | drushCron:production | projectID |
| getFilesByTaskId | task | view | projectID |
| getTasksByEnvironmentId | task | view | projectID |
| getTaskByRemoteId | task | view | projectID |
| getTaskById | task | view | projectID |
| addUser | user | add | |
| getAllOrganizations | organization | viewAll | |
| addOrganization | add | viewAll | |
| updateOrganization | update | viewAll | |
| deleteOrganization | delete | viewAll | |
| getOrganizationById | organization | view | organizationId |
| getProjectByEnvironmentId | organization | viewProject | organizationId |
| getGroupsByOrganizationId | organization | viewGroup | organizationId |
| getUsersByOrganizationId | organization | viewUsers | organizationId |
| getUserByEmailAndOrganizationId | organization | viewUser | organizationId |
| getNotificationsByOrganizationId | organization | viewNotification | organizationId |
| addProject | organization | addProject | organizationId |
| updateProject | organization | updateProject | organizationId |
| deleteProject | organization | deleteProject | organizationId |
| addGroup | organization | addGroup | organizationId |
| deleteGroup | organization | removeGroup | organizationId |
| addNotificationSlack | organization | addNotification | organizationId |
| updateNotificationSlack | organization | updateNotification | organizationId |
| deleteNotificationSlack | organization | removeNotification | organizationId |
| addUserToOrganization | organization | addOwner | organizationId |
| addUserToOrganization | organization | addViewer | organizationId |
| updateOrganization | organization | updateOrganization | organizationId |
| 名前 | リソース | スコープ | 属性 |
|---|---|---|---|
| deleteAllBackups | backup | deleteAll | |
| deleteAllEnvironments | environment | deleteAll | |
| getEnvironmentStorageMonthBy EnvironmentId |
environment | storage | |
| getEnvironmentHoursMonthBy EnvironmentId |
environment | storage | |
| getEnvironmentHitsMonthBy EnvironmentId |
environment | storage | |
| deleteAllGroups | group | deleteAll | |
| deleteAllNotificationSlacks | notification | deleteAll | |
| removeAllNotificationsFrom AllProjects |
notification | removeAll | |
| getAllOpenshifts | openshift | viewAll | |
| deleteAllProjects | project | deleteAll | |
| deleteAllSshKeys | ssh_key | deleteAll | |
| removeAllSshKeysFromAllUsers | ssh_key | removeAll | |
| deleteAllUsers | user | deleteAll | |
| addOrUpdateEnvironment Storage |
environment | storage | |
| addNotificationSlack | notification | add | |
| updateNotificationSlack | notification | update | |
| deleteNotificationSlack | notification | delete | |
| addKubernetes | kubernetes | add | |
| updateKubernetes | kubernetes | update | |
| deleteKubernetes | kubernetes | delete | |
| deleteAllKubernetes | kubernetes | deleteAll | |
| getAllProjects | project | viewAll | |
| addSshKey | ssh_key | add | userID |
| updateSshKey | ssh_key | update | userID |
| deleteSshKey | ssh_key | delete | userID |
| getUserSshKeys | ssh_key | view:user | userID |
| updateUser | user | update | userID |
| deleteUser | user | delete | userID |
| deleteEnvironment | environment | delete:production | projectID |
| deleteProject | project | delete | projectID |
| getProjectByEnvironmentId | project | viewPrivateKey | projectID |
| getProjectByGitUrl | project | viewPrivateKey | projectID |
| getProjectByName | project | viewPrivateKey | projectID |
| deleteBackup | backup | delete | projectID |
| addEnvVariable (to Project) | env_var | project:add | projectID |
| addEnvVariable (to Environment) |
env_var | environment:add:production | projectID |
| deleteEnvVariable | env_var | delete | projectID |
| deleteEnvVariable (from Project) | env_var | project:delete | projectID |
| deleteEnvVariable (from Environment) | env_var | environment:delete:production | projectID |
| getEnvVarsByProjectId | env_var | project:viewValue | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:viewValue:production | projectID |
| addOrUpdateEnvironment | environment | addOrUpdate:production | projectID |
| updateEnvironment | environment | update:production | projectID |
| addDeployment | environment | deploy:production | projectID |
| deleteDeployment | deployment | delete | projectID |
| updateDeployment | deployment | update | projectID |
| setEnvironmentServices | environment | update:production | projectID |
| deployEnvironmentLatest | environment | deploy:production | projectID |
| deployEnvironmentBranch | environment | deploy:production | projectID |
| deployEnvironmentPullrequest | environment | deploy:production | projectID |
| deployEnvironmentPromote | environment | deploy:production | projectID |
| updateGroup | group | update | groupID |
| deleteGroup | group | delete | groupID |
| addUserToGroup | group | addUser | groupID |
| removeUserFromGroup | group | removeUser | groupID |
| addNotificationToProject | project | addNotification | projectID |
| removeNotificationFromProject | project | removeNotification | projectID |
| updateProject | project | update | projectID |
| addGroupsToProject | project | addGroup | projectID |
| removeGroupsFromProject | project | removeGroup | projectID |
| addTask | task | add:production | projectID |
| taskDrushUserLogin | task | drushUserLogin:destination:production | environmentID |
| taskDrushSqlSync | task | drushSqlSync:destination:production | projectID |
| taskDrushRsyncFiles | task | drushRsync:destination:production | projectID |
| addBackup | backup | add | projectID |
| getBackupsByEnvironmentId | backup | view | projectID |
| addEnvVariable (to Environment) |
env_var | environment:add:development | projectID |
| deleteEnvVariable (from Environment) | env_var | environment:delete:development | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:viewValue:development | projectID |
| addOrUpdateEnvironment | environment | addOrUpdate:development | projectID |
| updateEnvironment | environment | update:development | projectID |
| deleteEnvironment | environment | delete:development | projectID |
| addDeployment | environment | deploy:development | projectID |
| setEnvironmentServices | environment | update:development | projectID |
| deployEnvironmentLatest | environment | deploy:development | projectID |
| deployEnvironmentBranch | environment | deploy:development | projectID |
| deployEnvironmentPullrequest | environment | deploy:development | projectID |
| deployEnvironmentPromote | environment | deploy:development | projectID |
| getNotificationsByProjectId | notification | view | projectID |
| addTask | task | add:development | projectID |
| taskDrushArchiveDump | task | drushArchiveDump:development | projectID |
| taskDrushArchiveDump | task | drushArchiveDump:production | projectID |
| taskDrushSqlDump | task | drushSqlDump:development | projectID |
| taskDrushSqlDump | task | drushSqlDump:production | projectID |
| taskDrushUserLogin | task | drushUserLogin:destination:development | environmentID |
| taskDrushSqlSync | task | drushSqlSync:source:development | projectID |
| taskDrushSqlSync | task | drushSqlSync:source:production | projectID |
| taskDrushSqlSync | task | drushSqlSync:destination:development | projectID |
| taskDrushRsyncFiles | task | drushRsync:source:development | projectID |
| taskDrushRsyncFiles | task | drushRsync:source:production | projectID |
| taskDrushRsyncFiles | task | drushRsync:destination:development | projectID |
| deleteTask | task | delete | projectID |
| updateTask | task | update | projectID |
| uploadFilesForTask | task | update | projectID |
| deleteFilesForTask | task | delete | projectID |
| getBackupsByEnvironmentId | deployment | view | projectID |
| getEnvironmentsByProjectId | environment | view | projectID |
| getEnvironmentServices ByEnvironmentId |
environment | view | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:view:development | projectID |
| getEnvVarsByEnvironmentId | env_var | environment:view:production | projectID |
| getEnvVarsByProjectId | env_var | project:view | projectID |
| addGroup | group | add | |
| getOpenshiftByProjectId | openshift | view | projectID |
| addProject | project | add | |
| getProjectByEnvironmentId | project | view | projectID |
| getProjectByGitUrl | project | view | projectID |
| getProjectByName | project | view | projectID |
| addRestore | restore | add | projectID |
| updateRestore | restore | update | projectID |
| taskDrushCacheClear | task | drushCacheClear:development | projectID |
| taskDrushCacheClear | task | drushCacheClear:production | projectID |
| taskDrushCron | task | drushCron:development | projectID |
| taskDrushCron | task | drushCron:production | projectID |
| getFilesByTaskId | task | view | projectID |
| getTasksByEnvironmentId | task | view | projectID |
| getTaskByRemoteId | task | view | projectID |
| getTaskById | task | view | projectID |
| addUser | user | add | |
| getAllOrganizations | organization | viewAll | |
| addOrganization | add | viewAll | |
| updateOrganization | update | viewAll | |
| deleteOrganization | delete | viewAll | |
| getOrganizationById | organization | view | organizationId |
| getProjectByEnvironmentId | organization | viewProject | organizationId |
| getGroupsByOrganizationId | organization | viewGroup | organizationId |
| getUsersByOrganizationId | organization | viewUsers | organizationId |
| getUserByEmailAndOrganizationId | organization | viewUser | organizationId |
| getNotificationsByOrganizationId | organization | viewNotification | organizationId |
| addProject | organization | addProject | organizationId |
| updateProject | organization | updateProject | organizationId |
| deleteProject | organization | deleteProject | organizationId |
| addGroup | organization | addGroup | organizationId |
| deleteGroup | organization | removeGroup | organizationId |
| addNotificationSlack | organization | addNotification | organizationId |
| updateNotificationSlack | organization | updateNotification | organizationId |
| deleteNotificationSlack | organization | removeNotification | organizationId |
| addUserToOrganization | organization | addOwner | organizationId |
| addUserToOrganization | organization | addViewer | organizationId |
| updateOrganization | organization | updateOrganization | organizationId |