1 krisbash 1.1 // Copyright (c) 2008 DMTF. All rights reserved.
2 [Version ( "2.18.0" ),
3 UMLPackagePath ( "CIM::User::Role" ),
4 Description (
5 "The Role object class is used to represent a position or set "
6 "of responsibilities within an organization, organizational "
7 "unit or other scope, and MAY be filled by a person or persons "
8 "(or non-human entities represented by ManagedSystemElement "
9 "subclasses) - i.e., the \'role occupants\'. The latter MAY be "
10 "explicitly associated to a Role, by associating Identities "
11 "using MemberOfCollection. The \'position or set of "
12 "responsibilities\' of a Role are represented as a set of "
13 "rights defined by instances of the Privilege class, and are "
14 "also associated to the Role via MemberOfCollection. If "
15 "Identities are not explicitly associated, instances of "
16 "AuthorizationRule MUST be associated with a Role using "
17 "AuthorizationRuleAppliesToRole. The rule defines how subject "
18 "entities are authorized for a Role and to which target "
19 "entities the Role applies. \n"
20 "\n"
21 "The Role class is defined so as to incorporate commonly-used "
22 krisbash 1.1 "LDAP attributes to permit implementations to easily derive "
23 "this information from LDAP-accessible directories. This "
24 "class\'s properties are a subset of a related class, "
25 "OtherRoleInformation, which defines all the group properties "
26 "and uses arrays for directory compatibility." )]
27 class CIM_Role : CIM_Collection {
28
29 [Key, Description (
30 "CreationClassName indicates the name of the class or the "
31 "subclass used in the creation of an instance. When used "
32 "with the other key properties of this class, this "
33 "property allows all instances of this class and its "
34 "subclasses to be uniquely identified." ),
35 MaxLen ( 256 )]
36 string CreationClassName;
37
38 [Key, Description (
39 "The Name property defines the label by which the object "
40 "is known. In the case of an LDAP-derived instance, the "
41 "Name property value may be set to the distinguished name "
42 "of the LDAP-accessed object instance." ),
43 krisbash 1.1 MaxLen ( 1024 )]
44 string Name;
45
46 [Description (
47 "This property may be used to describe the kind of "
48 "business activity performed by the members (role "
49 "occupants) in the position or set of responsibilities "
50 "represented by the Role." ),
51 MaxLen ( 128 )]
52 string BusinessCategory;
53
54 [Required, Description (
55 "A Common Name is a (possibly ambiguous) name by which "
56 "the role is commonly known in some limited scope (such "
57 "as an organization) and conforms to the naming "
58 "conventions of the country or culture with which it is "
59 "associated." )]
60 string CommonName;
61
62 [Description (
63 "RoleCharacteristics provides descriptive information "
64 krisbash 1.1 "about the intended usage of the Role.\n"
65 "When the value 2 \"Static\" is specified, no "
66 "modification to the role shall be allowed. Any requests "
67 "by client to change the privileges or the scope of the "
68 "role by modifying the associated instances of "
69 "CIM_Privilege or referencing associations shall fail.\n"
70 "When the value 2 \"Static\" is not specified, the "
71 "instance of CIM_Role may be modified by a client. The "
72 "modification may include changing the scope of the role "
73 "or rights granted. When the value 3 \"Opaque\" is "
74 "specified, the rights granted by the CIM_Role instance "
75 "shall not be explicitly modeled through aggregation of "
76 "instances of CIM_Privilege.\n"
77 "When the value 3 \"Opaque\" is not specified, the rights "
78 "granted by the instance of CIM_Role shall be explicitly "
79 "modeled through aggregation of instances of "
80 "CIM_Privilege." ),
81 ValueMap { "2", "3", "..", "32000..65535" },
82 Values { "Static", "Opaque", "DMTF Reserved",
83 "Vendor Specific" }]
84 uint16 RoleCharacteristics[];
85 krisbash 1.1
86
87 };
|