foreman_discovery 1.0.0.rc1

data/test/foreman_app/lib/fog_extensions/openstack/server.rb

@@ -0,0 +1,40 @@
+module FogExtensions
+  module Openstack
+    module Server
+
+      extend ActiveSupport::Concern
+
+      included do
+        alias_method_chain :security_groups, :no_id
+      end
+
+      def to_s
+        name
+      end
+
+      def tenant
+        service.tenants.detect{|t| t.id == tenant_id }
+      end
+
+      def flavor_with_object
+        service.flavors.get attributes[:flavor]['id']
+      end
+
+      def created_at
+        Time.parse attributes['created']
+      end
+
+      # the original method requires a server ID, however we want to be able to call this method on new instances too
+      def security_groups_with_no_id
+        return [] if id.nil?
+
+        security_groups_without_no_id
+      end
+
+      # dummy place holder for passing down the floating ip network
+      def network
+      end
+
+    end
+  end
+end

data/test/foreman_app/lib/fog_extensions/ovirt/server.rb

@@ -0,0 +1,15 @@
+module FogExtensions
+  module Ovirt
+    module Server
+
+      def state
+        status
+      end
+
+      def interfaces_attributes=(attrs); end
+
+      def volumes_attributes=(attrs);  end
+
+    end
+  end
+end

data/test/foreman_app/lib/fog_extensions/ovirt/volume.rb

@@ -0,0 +1,11 @@
+module FogExtensions
+  module Ovirt
+    module Volume
+      def as_json(options={ })
+        size_gb
+        super options
+      end
+    end
+  end
+end
+

data/test/foreman_app/lib/fog_extensions/vsphere/folder.rb

@@ -0,0 +1,14 @@
+module FogExtensions
+  module Vsphere
+    module Folder
+      def to_label
+        if parent and parent != datacenter
+          "#{parent} / #{name}"
+        else
+          name == "vm" ? "VM Folder" : name
+        end
+      end
+    end
+
+  end
+end

data/test/foreman_app/lib/fog_extensions/vsphere/mini_server.rb

@@ -0,0 +1,20 @@
+module FogExtensions
+  module Vsphere
+    class MiniServer
+      attr_reader :name, :identity, :cpus, :memory, :ready
+      alias_method :ready?, :ready
+
+      def initialize raw
+        @raw      = raw
+        @name     = raw.name
+        @identity = raw.config.instanceUuid
+        @cpus     = raw.config.hardware.numCPU
+        @memory   = raw.config.hardware.memoryMB * 1024 * 1024
+        @ready    = raw.runtime.powerState == "poweredOn"
+      end
+
+      private
+      attr_reader :raw
+    end
+  end
+end

data/test/foreman_app/lib/fog_extensions/vsphere/mini_servers.rb

@@ -0,0 +1,22 @@
+require 'fog_extensions/vsphere/mini_server'
+
+module FogExtensions
+  module Vsphere
+    class MiniServers
+
+      def initialize client, dc
+        @client = client
+        @dc     = client.send(:find_datacenters, dc)[0]
+      end
+
+      def all(filters = { })
+        dc.vmFolder.childEntity.grep(RbVmomi::VIM::VirtualMachine).map do |server|
+          MiniServer.new(server)
+        end
+      end
+
+      private
+      attr_reader :client, :dc
+    end
+  end
+end

data/test/foreman_app/lib/fog_extensions/vsphere/server.rb

@@ -0,0 +1,19 @@
+module FogExtensions
+  module Vsphere
+    module Server
+
+      def to_s
+        name
+      end
+
+      def state
+        power_state
+      end
+
+      def interfaces_attributes=(attrs); end
+
+      def volumes_attributes=(attrs);  end
+
+    end
+  end
+end

data/test/foreman_app/lib/foreman.rb

@@ -0,0 +1,14 @@
+require 'foreman/access_permissions'
+require 'foreman/default_data/loader'
+require 'foreman/renderer'
+require 'foreman/controller'
+require 'net'
+require 'foreman/provision' if SETTINGS[:unattended]
+require 'audit_extensions'
+
+module Foreman
+  # generate a UUID
+  def self.uuid
+    UUIDTools::UUID.random_create.to_s
+  end
+end

data/test/foreman_app/lib/foreman/access_control.rb

@@ -0,0 +1,120 @@
+# redMine - project management software
+# Copyright (C) 2006-2007  Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+
+module Foreman
+  module AccessControl
+
+    class << self
+      def map
+        mapper = Mapper.new
+        yield mapper
+        @permissions ||= []
+        @permissions += mapper.mapped_permissions
+      end
+
+      def permissions
+        @permissions
+      end
+
+      # Returns the permission of given name or nil if it wasn't found
+      # Argument should be a symbol
+      def permission(name)
+        permissions.detect {|p| p.name == name}
+      end
+
+      # Returns the actions that are allowed by the permission of given name
+      def allowed_actions(permission_name)
+        perm = permission(permission_name)
+        perm ? perm.actions : []
+      end
+
+      def public_permissions
+        @public_permissions ||= @permissions.select {|p| p.public?}
+      end
+
+      def members_only_permissions
+        @members_only_permissions ||= @permissions.select {|p| p.require_member?}
+      end
+
+      def loggedin_only_permissions
+        @loggedin_only_permissions ||= @permissions.select {|p| p.require_loggedin?}
+      end
+
+      def available_security_blocks
+        @available_security_blocks ||= @permissions.collect(&:security_block).uniq.compact
+      end
+
+      def blocks_permissions(modules)
+        @permissions.select {|p| p.security_block.nil? || modules.include?(p.security_block.to_s)}
+      end
+    end
+
+    class Mapper
+      def initialize
+        @security_block = nil
+      end
+
+      def permission(name, hash, options={})
+        @permissions ||= []
+        options.merge!(:security_block => @security_block)
+        @permissions << Permission.new(name, hash, options)
+      end
+
+      def security_block(name, options={})
+        @security_block = name
+        yield self
+        @security_block = nil
+      end
+
+      def mapped_permissions
+        @permissions
+      end
+    end
+
+    class Permission
+      attr_reader :name, :actions, :security_block
+
+      def initialize(name, hash, options)
+        @name = name
+        @actions = []
+        @public = options[:public] || false
+        @require = options[:require]
+        @security_block = options[:security_block]
+        hash.each do |controller, actions|
+          if actions.is_a? Array
+            @actions << actions.collect {|action| "#{controller}/#{action}"}
+          else
+            @actions << "#{controller}/#{actions}"
+          end
+        end
+        @actions.flatten!
+      end
+
+      def public?
+        @public
+      end
+
+      def require_member?
+        @require && @require == :member
+      end
+
+      def require_loggedin?
+        @require && (@require == :member || @require == :loggedin)
+      end
+    end
+  end
+end

data/test/foreman_app/lib/foreman/access_permissions.rb

@@ -0,0 +1,572 @@
+require 'foreman/access_control'
+
+# Permissions
+Foreman::AccessControl.map do |map|
+  map.security_block :architectures do |map|
+    map.permission :view_architectures,
+                   :architectures => [:index, :show, :auto_complete_search], :"api/v1/architectures" => [:index, :show]
+    map.permission :create_architectures,
+                   :architectures => [:new, :create], :"api/v1/architectures" => [:new, :create]
+    map.permission :edit_architectures,
+                   :architectures => [:edit, :update], :"api/v1/architectures" => [:edit, :update]
+    map.permission :destroy_architectures,
+                   :architectures => [:destroy], :"api/v1/architectures" => [:destroy]
+  end
+
+  map.security_block :authentication_providers do |map|
+    map.permission :view_authenticators,    {:auth_source_ldaps => [:index, :show],
+                                             :"api/v1/auth_source_ldaps" => [:index, :show],
+                                             :"api/v2/auth_source_ldaps" => [:index, :show]
+    }
+    map.permission :create_authenticators,  {:auth_source_ldaps => [:new, :create],
+                                             :"api/v1/auth_source_ldaps" => [:create],
+                                             :"api/v2/auth_source_ldaps" => [:create]
+    }
+    map.permission :edit_authenticators,    {:auth_source_ldaps => [:edit, :update],
+                                             :"api/v1/auth_source_ldaps" => [:update],
+                                             :"api/v2/auth_source_ldaps" => [:update]
+    }
+    map.permission :destroy_authenticators, {:auth_source_ldaps => [:destroy],
+                                             :"api/v1/auth_source_ldaps" => [:destroy],
+                                             :"api/v2/auth_source_ldaps" => [:destroy]
+    }
+  end
+
+  map.security_block :bookmarks do |map|
+    map.permission :view_bookmarks,
+                   :bookmarks => [:index, :show], :"api/v1/bookmarks" => [:index, :show]
+    map.permission :create_bookmarks,
+                   :bookmarks => [:new, :create], :"api/v1/bookmarks" => [:new, :create]
+    map.permission :edit_bookmarks,
+                   :bookmarks => [:edit, :update], :"api/v1/bookmarks" => [:edit, :update]
+    map.permission :destroy_bookmarks,
+                   :bookmarks => [:destroy], :"api/v1/bookmarks" => [:destroy]
+  end
+
+  map.security_block :compute_resources do |map|
+    ajax_actions = [:test_connection]
+    map.permission :view_compute_resources,    {:compute_resources => [:index, :show, :auto_complete_search],
+                                                :"api/v1/compute_resources" => [:index, :show],
+                                                :"api/v2/compute_resources" => [:index, :show]
+    }
+    map.permission :create_compute_resources,  {:compute_resources => [:new, :create].push(*ajax_actions),
+                                                :"api/v1/compute_resources" => [:create],
+                                                :"api/v2/compute_resources" => [:create]
+    }
+    map.permission :edit_compute_resources,    {:compute_resources => [:edit, :update].push(*ajax_actions),
+                                                :"api/v1/compute_resources" => [:update],
+                                                :"api/v2/compute_resources" => [:update]
+    }
+    map.permission :destroy_compute_resources, {:compute_resources => [:destroy],
+                                                :"api/v1/compute_resources" => [:destroy],
+                                                :"api/v2/compute_resources" => [:destroy]
+    }
+  end
+
+  map.security_block :compute_resources_vms do |map|
+    map.permission :view_compute_resources_vms,    {:compute_resources_vms => [:index, :show]}
+    map.permission :create_compute_resources_vms,  {:compute_resources_vms => [:new, :create]}
+    map.permission :edit_compute_resources_vms,    {:compute_resources_vms => [:edit, :update]}
+    map.permission :destroy_compute_resources_vms, {:compute_resources_vms => [:destroy]}
+    map.permission :power_compute_resources_vms,   {:compute_resources_vms => [:power]}
+    map.permission :console_compute_resources_vms, {:compute_resources_vms => [:console]}
+  end
+
+  map.security_block :config_templates do |map|
+    map.permission :view_templates,    {:config_templates => [:index, :show, :revision, :auto_complete_search],
+                                        :"api/v1/config_templates" => [:index, :show, :revision],
+                                        :"api/v2/config_templates" => [:index, :show, :revision],
+                                        :"api/v2/template_combinations" => [:index, :show],
+                                        :"api/v1/template_kinds" => [:index]
+                                      }
+    map.permission :create_templates,  {:config_templates => [:new, :create],
+                                        :"api/v1/config_templates" => [:create],
+                                        :"api/v2/config_templates" => [:create],
+                                        :"api/v2/template_combinations" => [:create]
+                                      }
+    map.permission :edit_templates,    {:config_templates => [:edit, :update],
+                                        :"api/v1/config_templates" => [:update],
+                                        :"api/v2/config_templates" => [:update],
+                                        :"api/v2/template_combinations" => [:update]
+                                      }
+    map.permission :destroy_templates, {:config_templates => [:destroy],
+                                        :"api/v1/config_templates" => [:destroy],
+                                        :"api/v2/config_templates" => [:destroy],
+                                        :"api/v2/template_combinations" => [:destroy]
+                                      }
+    map.permission :deploy_templates,  {:config_templates => [:build_pxe_default],
+                                        :"api/v1/config_templates" => [:build_pxe_default],
+                                        :"api/v2/config_templates" => [:build_pxe_default]
+                                      }
+  end
+
+  map.security_block :domains do |map|
+    map.permission :view_domains,       {:domains => [:index, :show, :auto_complete_search],
+                                      :"api/v1/domains" => [:index, :show],
+                                      :"api/v2/domains" => [:index, :show],
+                                      :"api/v2/parameters" => [:index, :show]
+    }
+    map.permission :create_domains,      {:domains => [:new, :create],
+                                      :"api/v1/domains" => [:create],
+                                      :"api/v2/domains" => [:create]
+    }
+    map.permission :edit_domains,       {:domains => [:edit, :update],
+                                      :"api/v1/domains" => [:update],
+                                      :"api/v2/domains" => [:update],
+                                      :"api/v2/parameters" => [:create, :update, :destroy, :reset]
+    }
+    map.permission :destroy_domains,    {:domains => [:destroy],
+                                      :"api/v1/domains" => [:destroy],
+                                      :"api/v2/domains" => [:destroy]
+    }
+  end
+
+  map.security_block :environments do |map|
+    map.permission :view_environments,    {:environments => [:index, :show, :auto_complete_search],
+                                           :"api/v1/environments" => [:index, :show],
+                                           :"api/v2/environments" => [:index, :show]
+    }
+    map.permission :create_environments,  {:environments => [:new, :create],
+                                           :"api/v1/environments" => [:create],
+                                           :"api/v2/environments" => [:create]
+    }
+    map.permission :edit_environments,    {:environments => [:edit, :update],
+                                           :"api/v1/environments" => [:update],
+                                           :"api/v2/environments" => [:update]
+    }
+    map.permission :destroy_environments, {:environments => [:destroy],
+                                           :"api/v1/environments" => [:destroy],
+                                           :"api/v2/environments" => [:destroy]
+    }
+    map.permission :import_environments,  {:environments => [:import_environments, :obsolete_and_new]}
+  end
+
+  map.security_block :external_variables do |map|
+    map.permission :view_external_variables,    {:lookup_keys => [:index, :show, :auto_complete_search],
+                                                 :lookup_values => [:index]}
+    map.permission :create_external_variables,  {:lookup_keys => [:new, :create],
+                                                 :lookup_values => [:create]}
+    map.permission :edit_external_variables,    {:lookup_keys => [:edit, :update],
+                                                 :lookup_values => [:create, :update, :destroy]}
+    map.permission :destroy_external_variables, {:lookup_keys => [:destroy],
+                                                 :lookup_values => [:destroy]}
+  end
+
+  map.security_block :global_variables do |map|
+    map.permission :view_globals,    {:common_parameters => [:index, :show, :auto_complete_search],
+                                      :"api/v1/common_parameters" => [:index, :show],
+                                      :"api/v2/common_parameters" => [:index, :show]
+    }
+    map.permission :create_globals,  {:common_parameters => [:new, :create],
+                                      :"api/v1/common_parameters" => [:create],
+                                      :"api/v2/common_parameters" => [:create]
+    }
+    map.permission :edit_globals,    {:common_parameters => [:edit, :update],
+                                      :"api/v1/common_parameters" => [:update],
+                                      :"api/v2/common_parameters" => [:update]
+    }
+    map.permission :destroy_globals, {:common_parameters => [:destroy],
+                                      :"api/v1/common_parameters" => [:destroy],
+                                      :"api/v2/common_parameters" => [:destroy]
+    }
+  end
+
+  map.security_block :hostgroups do |map|
+    ajax_actions = [:architecture_selected, :domain_selected, :environment_selected, :medium_selected, :os_selected,
+      :use_image_selected]
+    host_ajax_actions = [:process_hostgroup]
+    pc_ajax_actions = [:parameters]
+
+    map.permission :view_hostgroups,       {:hostgroups => [:index, :show, :auto_complete_search],
+                                            :"api/v1/hostgroups" => [:index, :show],
+                                            :"api/v2/hostgroups" => [:index, :show]
+                                          }
+    map.permission :create_hostgroups,     {:hostgroups => [:new, :create, :clone].push(*ajax_actions),
+                                            :host => host_ajax_actions,
+                                            :puppetclasses => pc_ajax_actions,
+                                            :"api/v1/hostgroups" => [:create, :clone],
+                                            :"api/v2/hostgroups" => [:create, :clone]
+                                          }
+    map.permission :edit_hostgroups,       {:hostgroups => [:edit, :update, :architecture_selected, :nest].push(*ajax_actions),
+                                            :host => host_ajax_actions,
+                                            :puppetclasses => pc_ajax_actions,
+                                            :"api/v1/hostgroups" => [:update],
+                                            :"api/v2/parameters" => [:create, :update, :destroy, :reset],
+                                            :"api/v2/hostgroup_classes" => [:index, :create, :destroy]
+                                           }
+    map.permission :destroy_hostgroups,    {:hostgroups => [:destroy],
+                                            :"api/v1/hostgroups" => [:destroy],
+                                            :"api/v2/hostgroups" => [:destroy]
+    }
+  end
+
+  map.security_block :hosts do |map|
+    ajax_actions = [:architecture_selected, :compute_resource_selected, :domain_selected, :environment_selected,
+      :hostgroup_or_environment_selected, :medium_selected, :os_selected, :use_image_selected, :process_hostgroup,
+      :process_taxonomy, :current_parameters, :puppetclass_parameters, :template_used]
+    cr_ajax_actions = [:cluster_selected, :hardware_profile_selected, :provider_selected]
+    pc_ajax_actions = [:parameters]
+    subnets_ajax_actions = [:freeip]
+    tasks_ajax_actions = [:show]
+
+    map.permission :view_hosts,    {:hosts => [:index, :show, :errors, :active, :out_of_sync, :disabled, :pending,
+                                      :externalNodes, :pxe_config, :storeconfig_klasses, :auto_complete_search],
+                                    :dashboard => [:OutOfSync, :errors, :active],
+                                    :unattended => :template,
+                                     :"api/v1/hosts" => [:index, :show, :status],
+                                     :"api/v2/hosts" => [:index, :show, :status]
+
+                                  }
+    map.permission :create_hosts,  {:hosts => [:new, :create, :clone].push(*ajax_actions),
+                                    :compute_resources => cr_ajax_actions,
+                                    :puppetclasses => pc_ajax_actions,
+                                    :subnets => subnets_ajax_actions,
+                                     :"api/v1/hosts" => [:create],
+                                     :"api/v2/hosts" => [:create]
+                                  }
+    map.permission :edit_hosts,    {:hosts => [:edit, :update, :multiple_actions, :reset_multiple, :submit_multiple_enable,
+                                      :select_multiple_hostgroup, :select_multiple_environment, :submit_multiple_disable,
+                                      :multiple_parameters, :multiple_disable, :multiple_enable, :update_multiple_environment,
+                                      :update_multiple_hostgroup, :update_multiple_parameters, :toggle_manage,
+                                      :select_multiple_organization, :update_multiple_organization,
+                                      :select_multiple_location, :update_multiple_location].push(*ajax_actions),
+                                    :compute_resources => cr_ajax_actions,
+                                    :puppetclasses => pc_ajax_actions,
+                                    :subnets => subnets_ajax_actions,
+                                    :"api/v1/hosts" => [:update],
+                                    :"api/v2/hosts" => [:update]
+                                  }
+    map.permission :destroy_hosts, {:hosts => [:destroy, :multiple_actions, :reset_multiple, :multiple_destroy, :submit_multiple_destroy],
+                                    :"api/v1/hosts" => [:destroy],
+                                    :"api/v2/hosts" => [:destroy]
+                                  }
+    map.permission :build_hosts,   {:hosts => [:setBuild, :cancelBuild, :multiple_build, :submit_multiple_build],
+                                    :tasks => tasks_ajax_actions}
+    map.permission :power_hosts,   {:hosts => [:power]}
+    map.permission :console_hosts, {:hosts => [:console]}
+    map.permission :puppetrun_hosts, {:hosts => [:puppetrun, :multiple_puppetrun, :update_multiple_puppetrun]}
+  end
+
+  map.security_block :host_editing do |map|
+    map.permission :edit_classes,   {:host_editing => [:edit_classes],
+                                     :"api/v2/host_classes" => [:index, :create, :destroy]
+                                    }
+    map.permission :create_params,  {:host_editing => [:create_params],
+                                     :"api/v2/parameters" => [:create]
+    }
+    map.permission :edit_params,    {:host_editing => [:edit_params],
+                                     :"api/v2/parameters" => [:update]
+    }
+    map.permission :destroy_params, {:host_editing => [:destroy_params],
+                                     :"api/v2/parameters" => [:destroy, :reset]
+    }
+  end
+
+  map.security_block :images do |map|
+    map.permission :view_images,    {:images => [:index, :show, :auto_complete_search],
+                                     :"api/v1/images" => [:index, :show],
+                                     :"api/v2/images" => [:index, :show]
+    }
+    map.permission :create_images,  {:images => [:new, :create],
+                                     :"api/v1/images" => [:create],
+                                     :"api/v2/images" => [:create]
+    }
+    map.permission :edit_images,    {:images => [:edit, :update],
+                                     :"api/v1/images" => [:update],
+                                     :"api/v2/images" => [:update]
+    }
+    map.permission :destroy_images, {:images => [:destroy],
+                                     :"api/v1/images" => [:destroy],
+                                     :"api/v2/images" => [:destroy]
+    }
+  end
+
+  if SETTINGS[:locations_enabled]
+    map.security_block :locations do |map|
+      map.permission :view_locations, {:locations =>  [:index, :show, :auto_complete_search, :mismatches],
+                                       :"api/v1/locations" => [:index, :show],
+                                       :"api/v2/locations" => [:index, :show]
+      }
+      map.permission :create_locations, {:locations => [:new, :create, :clone_taxonomy, :step2],
+                                       :"api/v1/locations" => [:create],
+                                       :"api/v2/locations" => [:create]
+                                     }
+      map.permission :edit_locations, {:locations => [:edit, :update, :import_mismatches],
+                                       :"api/v1/locations" => [:update],
+                                       :"api/v2/locations" => [:update]
+      }
+      map.permission :destroy_locations, {:locations => [:destroy],
+                                       :"api/v1/locations" => [:destroy],
+                                       :"api/v2/locations" => [:destroy]
+      }
+      map.permission :assign_locations, {:locations => [:assign_all_hosts, :assign_hosts, :assign_selected_hosts]}
+    end
+  end
+
+  map.security_block :media do |map|
+    map.permission :view_media,    {:media => [:index, :show, :auto_complete_search],
+                                   :"api/v1/media" => [:index, :show],
+                                   :"api/v2/media" => [:index, :show]
+    }
+    map.permission :create_media,  {:media => [:new, :create],
+                                   :"api/v1/media" => [:create],
+                                   :"api/v2/media" => [:create]
+    }
+    map.permission :edit_media,    {:media => [:edit, :update],
+                                   :"api/v1/media" => [:update],
+                                   :"api/v2/media" => [:update]
+    }
+    map.permission :destroy_media, {:media => [:destroy],
+                                   :"api/v1/media" => [:destroy],
+                                   :"api/v2/media" => [:destroy]
+    }
+  end
+
+  map.security_block :models do |map|
+    map.permission :view_models,    {:models => [:index, :show, :auto_complete_search],
+                                     :"api/v1/models" => [:index, :show],
+                                     :"api/v2/models" => [:index, :show]
+    }
+    map.permission :create_models,  {:models => [:new, :create],
+                                     :"api/v1/models" => [:create],
+                                     :"api/v2/models" => [:create]
+    }
+    map.permission :edit_models,    {:models => [:edit, :update],
+                                     :"api/v1/models" => [:update],
+                                     :"api/v2/models" => [:update]
+    }
+    map.permission :destroy_models, {:models => [:destroy],
+                                     :"api/v1/models" => [:destroy],
+                                     :"api/v2/models" => [:destroy]
+    }
+  end
+
+  map.security_block :operatingsystems do |map|
+    map.permission :view_operatingsystems, { :operatingsystems => [:index, :show, :bootfiles, :auto_complete_search],
+                                             :"api/v1/operatingsystems" => [:index, :show, :bootfiles],
+                                             :"api/v2/operatingsystems" => [:index, :show, :bootfiles]
+                                            }
+    map.permission :create_operatingsystems, {:operatingsystems => [:new, :create],
+                                             :"api/v1/operatingsystems" => [:create],
+                                             :"api/v2/operatingsystems" => [:create],
+                                            }
+    map.permission :edit_operatingsystems, {:operatingsystems => [:edit, :update],
+                                       :"api/v1/operatingsystems" => [:update],
+                                       :"api/v2/operatingsystems" => [:update],
+                                       :"api/v2/parameters" => [:create, :update, :destroy, :reset]
+                                     }
+    map.permission :destroy_operatingsystems, {:operatingsystems => [:destroy],
+                                             :"api/v1/operatingsystems" => [:destroy],
+                                             :"api/v2/operatingsystems" => [:destroy]
+                                              }
+  end
+
+  map.security_block :partition_tables do |map|
+    map.permission :view_ptables,    {:ptables => [:index, :show, :auto_complete_search],
+                                      :"api/v1/ptables" => [:index, :show],
+                                      :"api/v2/ptables" => [:index, :show]
+    }
+    map.permission :create_ptables,  {:ptables => [:new, :create],
+                                      :"api/v1/ptables" => [:create],
+                                      :"api/v2/ptables" => [:create]
+    }
+    map.permission :edit_ptables,    {:ptables => [:edit, :update],
+                                      :"api/v1/ptables" => [:update],
+                                      :"api/v2/ptables" => [:update]
+    }
+    map.permission :destroy_ptables, {:ptables => [:destroy],
+                                      :"api/v1/ptables" => [:destroy],
+                                      :"api/v2/ptables" => [:destroy]
+    }
+  end
+
+  map.security_block :puppetclasses do |map|
+    map.permission :view_puppetclasses,    {:puppetclasses => [:index, :show, :auto_complete_search],
+                                          :"api/v1/puppetclasses" => [:index, :show],
+                                          :"api/v2/puppetclasses" => [:index, :show],
+                                          :"api/v1/lookup_keys" => [:index, :show],
+                                          :"api/v2/lookup_keys" => [:index, :show]
+                                        }
+    map.permission :create_puppetclasses,  {:puppetclasses => [:new, :create],
+                                          :"api/v1/puppetclasses" => [:create],
+                                          :"api/v2/puppetclasses" => [:create]
+    }
+    map.permission :edit_puppetclasses,    {:puppetclasses => [:edit, :update],
+                                          :"api/v1/puppetclasses" => [:update],
+                                          :"api/v2/puppetclasses" => [:update],
+                                          :"api/v1/lookup_keys" => [:create, :update, :destroy],
+                                          :"api/v2/lookup_keys" => [:create, :update, :destroy]
+
+    }
+    map.permission :destroy_puppetclasses, {:puppetclasses => [:destroy],
+                                          :"api/v1/puppetclasses" => [:destroy],
+                                          :"api/v2/puppetclasses" => [:destroy]
+                                        }
+    map.permission :import_puppetclasses,  {:puppetclasses => [:import_environments, :obsolete_and_new]}
+  end
+
+  map.security_block :smart_proxies do |map|
+    map.permission :view_smart_proxies,    {:smart_proxies => [:index, :show],
+                                          :"api/v1/smart_proxies" => [:index, :show],
+                                          :"api/v2/smart_proxies" => [:index, :show]
+    }
+    map.permission :create_smart_proxies,  {:smart_proxies => [:new, :create],
+                                          :"api/v1/smart_proxies" => [:create],
+                                          :"api/v2/smart_proxies" => [:create]
+    }
+    map.permission :edit_smart_proxies,    {:smart_proxies => [:edit, :update],
+                                          :"api/v1/smart_proxies" => [:update],
+                                          :"api/v2/smart_proxies" => [:update]
+    }
+    map.permission :destroy_smart_proxies, {:smart_proxies => [:destroy],
+                                          :"api/v1/smart_proxies" => [:destroy],
+                                          :"api/v2/smart_proxies" => [:destroy]
+    }
+  end
+
+  map.security_block :smart_proxies_autosign do |map|
+    map.permission :view_smart_proxies_autosign,    {:smart_proxies_autosign => [:index, :show]}
+    map.permission :create_smart_proxies_autosign,  {:smart_proxies_autosign => [:new, :create]}
+    map.permission :destroy_smart_proxies_autosign, {:smart_proxies_autosign => [:destroy]}
+  end
+
+  map.security_block :smart_proxies_puppetca do |map|
+    map.permission :view_smart_proxies_puppetca,    {:smart_proxies_puppetca => [:index]}
+    map.permission :edit_smart_proxies_puppetca,    {:smart_proxies_puppetca => [:update]}
+    map.permission :destroy_smart_proxies_puppetca, {:smart_proxies_puppetca => [:destroy]}
+  end
+
+  map.security_block :subnets do |map|
+    map.permission :view_subnets,    {:subnets => [:index, :show, :auto_complete_search],
+                                      :"api/v1/subnets" => [:index, :show],
+                                      :"api/v2/subnets" => [:index, :show]
+    }
+    map.permission :create_subnets,  {:subnets => [:new, :create],
+                                      :"api/v1/subnets" => [:create],
+                                      :"api/v2/subnets" => [:create]
+    }
+    map.permission :edit_subnets,    {:subnets => [:edit, :update],
+                                      :"api/v1/subnets" => [:update],
+                                      :"api/v2/subnets" => [:update]
+                                    }
+    map.permission :destroy_subnets, {:subnets => [:destroy],
+                                      :"api/v1/subnets" => [:destroy],
+                                      :"api/v2/subnets" => [:destroy]
+    }
+    map.permission :import_subnets,  {:subnets => [:import, :create_multiple]}
+  end
+
+  if SETTINGS[:organizations_enabled]
+    map.security_block :organizations do |map|
+      map.permission :view_organizations, {:organizations =>  [:index, :show, :auto_complete_search, :mismatches],
+                                           :"api/v1/organizations" => [:index, :show],
+                                           :"api/v2/organizations" => [:index, :show]
+                                         }
+      map.permission :create_organizations, {:organizations => [:new, :create, :clone_taxonomy, :step2],
+                                           :"api/v1/organizations" => [:create],
+                                           :"api/v2/organizations" => [:create]
+      }
+      map.permission :edit_organizations, {:organizations => [:edit, :update, :import_mismatches],
+                                           :"api/v1/organizations" => [:update],
+                                           :"api/v2/organizations" => [:update]
+      }
+      map.permission :destroy_organizations, {:organizations => [:destroy],
+                                           :"api/v1/organizations" => [:destroy],
+                                           :"api/v2/organizations" => [:destroy]
+      }
+      map.permission :assign_organizations, {:organizations => [:assign_all_hosts, :assign_hosts, :assign_selected_hosts]}
+    end
+  end
+
+  map.security_block :usergroups do |map|
+    map.permission :view_usergroups,    {:usergroups => [:index, :show],
+                                         :"api/v1/usergroups" => [:index, :show],
+                                         :"api/v2/usergroups" => [:index, :show]
+    }
+    map.permission :create_usergroups,  {:usergroups => [:new, :create],
+                                         :"api/v1/usergroups" => [:create],
+                                         :"api/v2/usergroups" => [:create]
+    }
+    map.permission :edit_usergroups,    {:usergroups => [:edit, :update],
+                                         :"api/v1/usergroups" => [:update],
+                                         :"api/v2/usergroups" => [:update]
+    }
+    map.permission :destroy_usergroups, {:usergroups => [:destroy],
+                                         :"api/v1/usergroups" => [:destroy],
+                                         :"api/v2/usergroups" => [:destroy]
+    }
+  end
+
+  map.security_block :users do |map|
+    ajax_actions = [:auth_source_selected]
+
+    map.permission :view_users,
+                   :users => [:index, :show, :auto_complete_search],
+                   :"api/v1/users" => [:index, :show],
+                   :"api/v2/users" => [:index, :show]
+    map.permission :create_users,
+                   :users => [:new, :create].push(*ajax_actions),
+                   :"api/v1/users" => [:create],
+                   :"api/v2/users" => [:create]
+    map.permission :edit_users,
+                   :users => [:edit, :update].push(*ajax_actions),
+                   :"api/v1/users" => [:update],
+                   :"api/v2/users" => [:update]
+    map.permission :destroy_users,
+                   :users => [:destroy],
+                   :"api/v1/users" => [:destroy],
+                   :"api/v2/users" => [:destroy]
+  end
+
+  map.security_block :settings_menu do |map|
+    map.permission :access_settings,  {:home => [:settings]}
+  end
+
+  map.security_block :dashboard do |map|
+    map.permission :access_dashboard, {:dashboard => [:index],
+                                      :"api/v1/dashboard" => [:index],
+                                      :"api/v2/dashboard" => [:index]
+    }
+  end
+
+  map.security_block :reports do |map|
+    map.permission :view_reports,    {:reports     => [:index, :show, :auto_complete_search],
+                                      :"api/v1/reports" => [:index, :show, :last],
+                                      :"api/v2/reports" => [:index, :show, :last]
+    }
+    map.permission :destroy_reports, {:reports     => [:destroy],
+                                      :"api/v1/reports" => [:destroy],
+                                      :"api/v2/reports" => [:destroy]
+    }
+  end
+
+  map.security_block :facts do |map|
+    map.permission :view_facts, {:facts       => [:index, :show],
+                                :fact_values => [:index, :show, :auto_complete_search],
+                                :"api/v1/fact_values" => [:index, :show],
+                                :"api/v2/fact_values" => [:index, :show]
+                              }
+  end
+
+  map.security_block :audit_logs do |map|
+    map.permission :view_audit_logs,  {:audits      => [:index, :show, :auto_complete_search],
+                                       :"api/v1/audits" => [:index, :show],
+                                       :"api/v2/audits" => [:index, :show]
+    }
+  end
+  map.security_block :statistics do |map|
+    map.permission :view_statistics,  {:statistics  => [:index, :show]}
+  end
+
+  map.security_block :trends do |map|
+    map.permission :view_trends,    {:trends => [:index, :show]}
+    map.permission :create_trends,  {:trends => [:new, :create]}
+    map.permission :edit_trends,    {:trends => [:edit, :update]}
+    map.permission :destroy_trends, {:trends => [:destroy]}
+    map.permission :update_trends,  {:trends => [:count]}
+  end
+
+  map.security_block :tasks do |map|
+    map.permission :view_tasks, {:trends => [:show]}
+  end
+end