summaryrefslogtreecommitdiff
path: root/cpp/src/qpid/acl/management-schema.xml
blob: 7d20353755a5b754edb249ac58f96b2a9dd10b24 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
<schema package="org.apache.qpid.acl">

<!--
 * Copyright (c) 2008 The Apache Software Foundation
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *    http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
-->

  <class name="acl">
    <property name="brokerRef"     type="objId"   references="qpid.Broker" access="RO" index="y" parentRef="y"/>
    <property name="policyFile"    type="sstr"    access="RO"              desc="Name of the policy file"/>
    <property name="enforcingAcl"  type="bool"    access="RO"              desc="Currently Enforcing ACL"/>
    <property name="transferAcl"   type="bool"    access="RO"              desc="Any transfer ACL rules in force"/>
    <property name="lastAclLoad"   type="absTime" access="RO"              desc="Timestamp of last successful load of ACL"/>
    <statistic name="aclDenyCount" type="count64" unit="record"            desc="Number of ACL requests denied"/>

    <method name="reloadACLFile" desc="Reload the ACL file"/>

    <event name="aclEvent" defaultSeverity="info" desc="Event generated by the ACL policy">
      <arg name="denied"  type="bool"/>
      <arg name="authId"  type="sstr"/>
      <arg name="action"  type="sstr"/>
      <arg name="objType" type="sstr"/>
      <arg name="name"    type="sstr"/>
      <arg name="params"  type="map"/>
    </event>

    <event name="fileLoaded" defaultSeverity="warning" desc="ACL file successfully loaded - New policy in effect">
      <arg name="authId" type="sstr" desc="Name of user who initiated the file load"/>
    </event>

    <event name="fileNotLoaded" defaultSeverity="error" desc="Replacement ACL file could not be loaded">
      <arg name="authId" type="sstr" desc="Name of user who initiated the file load"/>
      <arg name="reason" type="sstr" desc="Reason for failure"/>
    </event>
  </class>

</schema>