1 krisbash 1.1 // Copyright (c) 2008 DMTF.  All rights reserved.
 2                 [Version ( "2.18.0" ), 
 3                  UMLPackagePath ( "CIM::User::Role" ), 
 4                  Description ( 
 5                     "The Role object class is used to represent a position or set "
 6                     "of responsibilities within an organization, organizational "
 7                     "unit or other scope, and MAY be filled by a person or persons "
 8                     "(or non-human entities represented by ManagedSystemElement "
 9                     "subclasses) - i.e., the \'role occupants\'. The latter MAY be "
10                     "explicitly associated to a Role, by associating Identities "
11                     "using MemberOfCollection. The \'position or set of "
12                     "responsibilities\' of a Role are represented as a set of "
13                     "rights defined by instances of the Privilege class, and are "
14                     "also associated to the Role via MemberOfCollection. If "
15                     "Identities are not explicitly associated, instances of "
16                     "AuthorizationRule MUST be associated with a Role using "
17                     "AuthorizationRuleAppliesToRole. The rule defines how subject "
18                     "entities are authorized for a Role and to which target "
19                     "entities the Role applies. \n"
20                     "\n"
21                     "The Role class is defined so as to incorporate commonly-used "
22 krisbash 1.1        "LDAP attributes to permit implementations to easily derive "
23                     "this information from LDAP-accessible directories. This "
24                     "class\'s properties are a subset of a related class, "
25                     "OtherRoleInformation, which defines all the group properties "
26                     "and uses arrays for directory compatibility." )]
27              class CIM_Role : CIM_Collection {
28              
29                    [Key, Description ( 
30                        "CreationClassName indicates the name of the class or the "
31                        "subclass used in the creation of an instance. When used "
32                        "with the other key properties of this class, this "
33                        "property allows all instances of this class and its "
34                        "subclasses to be uniquely identified." ), 
35                     MaxLen ( 256 )]
36                 string CreationClassName;
37              
38                    [Key, Description ( 
39                        "The Name property defines the label by which the object "
40                        "is known. In the case of an LDAP-derived instance, the "
41                        "Name property value may be set to the distinguished name "
42                        "of the LDAP-accessed object instance." ), 
43 krisbash 1.1        MaxLen ( 1024 )]
44                 string Name;
45              
46                    [Description ( 
47                        "This property may be used to describe the kind of "
48                        "business activity performed by the members (role "
49                        "occupants) in the position or set of responsibilities "
50                        "represented by the Role." ), 
51                     MaxLen ( 128 )]
52                 string BusinessCategory;
53              
54                    [Required, Description ( 
55                        "A Common Name is a (possibly ambiguous) name by which "
56                        "the role is commonly known in some limited scope (such "
57                        "as an organization) and conforms to the naming "
58                        "conventions of the country or culture with which it is "
59                        "associated." )]
60                 string CommonName;
61              
62                    [Description ( 
63                        "RoleCharacteristics provides descriptive information "
64 krisbash 1.1           "about the intended usage of the Role.\n"
65                        "When the value 2 \"Static\" is specified, no "
66                        "modification to the role shall be allowed. Any requests "
67                        "by client to change the privileges or the scope of the "
68                        "role by modifying the associated instances of "
69                        "CIM_Privilege or referencing associations shall fail.\n"
70                        "When the value 2 \"Static\" is not specified, the "
71                        "instance of CIM_Role may be modified by a client. The "
72                        "modification may include changing the scope of the role "
73                        "or rights granted. When the value 3 \"Opaque\" is "
74                        "specified, the rights granted by the CIM_Role instance "
75                        "shall not be explicitly modeled through aggregation of "
76                        "instances of CIM_Privilege.\n"
77                        "When the value 3 \"Opaque\" is not specified, the rights "
78                        "granted by the instance of CIM_Role shall be explicitly "
79                        "modeled through aggregation of instances of "
80                        "CIM_Privilege." ), 
81                     ValueMap { "2", "3", "..", "32000..65535" }, 
82                     Values { "Static", "Opaque", "DMTF Reserved", 
83                        "Vendor Specific" }]
84                 uint16 RoleCharacteristics[];
85 krisbash 1.1 
86              
87              };