ManifestKind
: string
in package
The entity kinds a §27.6 manifest can declare.
The order of the cases is the order ManagementPlan applies them in, and it is not alphabetical or arbitrary — it is the dependency order §27.6 requires be DERIVED rather than written down by the caller. A role cannot be granted a permission that does not exist yet, and a group cannot be assigned a role that does not exist yet.
Table of Contents
Cases
- Group = 'group'
- A group, plus the roles assigned to it. Depends on roles.
- Permission = 'permission'
- A permission (an action). Depends on nothing.
- Resource = 'resource'
- A hierarchical resource. Ordered first, and among themselves parents before children.
- Role = 'role'
- A role, plus the permission grants it carries. Depends on permissions and resources.
Cases
Resource
A hierarchical resource. Ordered first, and among themselves parents before children.
Permission
A permission (an action). Depends on nothing.
Role
A role, plus the permission grants it carries. Depends on permissions and resources.
Group
A group, plus the roles assigned to it. Depends on roles.