xs-security.json

{
    "xsappname": "openSAPHANA2020-ex",
    "tenant-mode": "shared",
    "scopes": [
        {
            "name": "$XSAPPNAME.Display",
            "description": "display"
        },
        {
            "name": "$XSAPPNAME.Create",
            "description": "create"
        },
        {
            "name": "$XSAPPNAME.Edit",
            "description": "edit"
        },
        {
            "name": "$XSAPPNAME.Delete",
            "description": "delete"
        },
        {
            "name": "$XSAPPNAME.Admin",
            "description": "admin"
        },
        {
            "name": "xs_authorization.read",
            "description": "Read authorization information from UAA"
        },
        {
            "name": "xs_authorization.write",
            "description": "Write authorization information to UAA"
        }
    ],
    "attributes": [
        {
            "name": "client",
            "description": "Session Client",
            "valueType": "int"
        },
        {
            "name": "country",
            "description": "country",
            "valueType": "s"
        }
    ],
    "role-templates": [
        {
            "name": "Token_Exchange",
            "description": "UAA",
            "scope-references": [
                "uaa.user"
            ]
        },
        {
            "name": "Viewer",
            "description": "View all records",
            "scope-references": [
                "$XSAPPNAME.Display"
            ],
            "attribute-references": [
                "client",
                "country"
            ]
        },
        {
            "name": "Editor",
            "description": "Edit and Delete records",
            "scope-references": [
                "$XSAPPNAME.Create",
                "$XSAPPNAME.Edit",
                "$XSAPPNAME.Delete",
                "$XSAPPNAME.Display"
            ],
            "attribute-references": [
                "client"
            ]
        },
        {
            "name": "Admin",
            "description": "Application Admin",
            "scope-references": [
                "$XSAPPNAME.Create",
                "$XSAPPNAME.Edit",
                "$XSAPPNAME.Delete",
                "$XSAPPNAME.Display",
                "$XSAPPNAME.Admin"
            ],
            "attribute-references": [
                "client"
            ]
        }
    ],
    "oauth2-configuration": {
        "redirect-uris": [
            "http://localhost:5000",
            "http://localhost:5000/login/callback",
            "https://*applicationstudio.cloud.sap/login/callback"
        ]
    }
}