Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add additional rights and clarifications to user management API #11908

Merged
merged 2 commits into from
Dec 2, 2021
Merged

Add additional rights and clarifications to user management API #11908

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
ac23650
user management: add ActAsAnyPartyRight, optional primary party
meiersi-da Nov 29, 2021
4be45d4
Remove xxxAnyParty rights.
meiersi-da Dec 2, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 11 additions & 1 deletion ledger-api/grpc-definitions/com/daml/ledger/api/v1/admin/user_management_service.proto
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ service UserManagementService {
rpc GetUser (GetUserRequest) returns (User);

// Delete an existing user and all its rights.
rpc DeleteUser (DeleteUserRequest) returns (google.protobuf.Empty);
rpc DeleteUser (DeleteUserRequest) returns (DeleteUserResponse);

// List the all existing users.
rpc ListUsers (ListUsersRequest) returns (ListUsersResponse);
Expand Down Expand Up @@ -72,9 +72,16 @@ message User {
// The primary party as which this user reads and acts by default on the ledger
// _provided_ it has the corresponding ``CanReadAs(primary_party)`` or
// ``CanActAs(primary_party)`` rights.
//
// Ledger API clients SHOULD set this field to a non-empty value for all users to
// enable the users to act on the ledger using their own Daml party.
// Ledger API clients MAY set this field to empty for special users; e.g., a user
// that is granted ``CanReadAsAnyParty`` so that it can export the data for all parties
// hosted on the participant node.
string primary_party = 2;
}


// A right granted to a user.
message Right {
// The user is allowed to administrate the participant node.
Expand Down Expand Up @@ -123,6 +130,9 @@ message DeleteUserRequest {
string user_id = 1;
}

message DeleteUserResponse {
}

// Required authorization: ``HasRight(ParticipantAdmin)``
message ListUsersRequest {
// TODO: add pagination, cf. https://cloud.google.com/apis/design/design_patterns#list_pagination
Expand Down