# Note: casbin-Vulnerability if A has role B, B has role C, then A has role C. This transitivity is infinite for now.

p, developer, task, create
p, developer, task, list
p, developer, task, update
p, developer, task, run

# developer can't delete task and suspend task .

p, task_admin, task, advance
p, task_admin, task, list
p, task_admin, task, update
p, task_admin, task, delete
p, task_admin, task, run
p, task_admin, task, create
p, task_admin, task, suspend

p, task_admin, task_instance, kill
p, task_admin, task_log, delete
p, task_admin, task_log, list
p, task_admin, task_log, detail


p, processor_admin, executor_processor, activate
p, processor_admin, executor_processor, update
p, processor_admin, executor_processor, delete
p, processor_admin, executor_processor, list
p, processor_admin, executor_processor, create


p, group_admin, executor_group, update
p, group_admin, executor_group, delete
p, group_admin, executor_group, list
p, group_admin, executor_group, create
p, group_admin, executor_group, detail

p, group_admin, executor_processor_bind, create
p, group_admin, executor_processor_bind, update
p, group_admin, executor_processor_bind, list
p, group_admin, executor_processor_bind, delete


p, user_admin, user, delete
p, user_admin, user, update
p, user_admin, user, create
p, user_admin, user, list
p, user_admin, user, append_role
p, user_admin, user, delete_role
p, user_admin, user, append_permission
p, user_admin, user, delete_permission
p, user_admin, user, roles
p, user_admin, user, permissions

p, user_admin, permission, list
p, user_admin, role, list
p, user_admin, role, permission_detail
p, user_admin, role, users


p, log_admin, user_login_log, list
p, log_admin, operation_log, list
p, log_admin, operation_log, detail


# User Role Definition Area
# g, username, task_admin

g, bincheng, team_leader
g, bincheng-tester, developer

g, team_leader, task_admin
g, team_leader, processor_admin
g, team_leader, group_admin
g, team_leader, user_admin
g, team_leader, log_admin

g, developer, processor_admin
g, developer, log_admin