tegwick
86716ff263
FLEX-WP-0025-T01/T02: keep merged attributes, add registry/asserted namespaces later, and declare the remaining ceiling keys so no published allowlist is unbacked. T03 stays waiting on validate. Assistant: grok Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267
34 lines
1.3 KiB
JSON
34 lines
1.3 KiB
JSON
{
|
|
"systems": [{
|
|
"id": "user-engine",
|
|
"name": "User Engine",
|
|
"resource_types": [
|
|
{"name":"user-engine:user","scope_level":"Resource","planes":["Identity","Audit"]},
|
|
{"name":"user-engine:membership","scope_level":"Resource","planes":["Identity","Policy","Audit"]},
|
|
{"name":"user-engine:family-invitation","scope_level":"Resource","planes":["Identity","Audit"]},
|
|
{"name":"user-engine:tenant","scope_level":"Tenant","planes":["Identity","Audit"]},
|
|
{"name":"user-engine:outbox","scope_level":"Platform","planes":["Audit"]}
|
|
,{"name":"user-engine:registration","scope_level":"Resource","planes":["Identity","Audit"]}
|
|
,{"name":"user-engine:registration-factor","scope_level":"Resource","planes":["Identity","Audit"]}
|
|
],
|
|
"actions": [],
|
|
"metadata": {"flex_auth_contract":"protected-system-v0","dynamic_actions":true}
|
|
}],
|
|
"resource_manifests": [],
|
|
"tenants": [],
|
|
"subjects": [
|
|
{
|
|
"id": "registration-applicant",
|
|
"type": "Human",
|
|
"display_name": "Public registration applicant",
|
|
"organization_relation": "Customer",
|
|
"roles": ["registration-applicant"],
|
|
"tenant": "tenant:friendly:binky",
|
|
"claims": {
|
|
"issuer": "urn:netkingdom:public-registration"
|
|
}
|
|
}
|
|
],
|
|
"groups": [],
|
|
"relationships": []
|
|
}
|