# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

# =============================================================================
#                                Jetspeed Schema
# =============================================================================
#
# The following attribute type OID have been arbitrarily chosen for now.
#
#              +-----------------------------+-----------------+
#              |  Apache AttributeType OID   |      name       |
#              +-----------------------------+-----------------+
#              | 1.3.6.1.4.1.8100.1.2.3.1    | j2-classname    |
#              | 1.3.6.1.4.1.8100.1.2.3.2    | j2-action       |
#              | 1.3.6.1.4.1.8100.1.2.3.3    | j2-role         |
#              | 1.3.6.1.4.1.8100.1.2.3.4    | j2-group        |
#              | 1.3.6.1.4.1.8100.1.2.3.5    | j2-permission   |
#              | 1.3.6.1.4.1.8100.1.2.3.6    | creation-date   |
#              | 1.3.6.1.4.1.8100.1.2.3.7    | modified-date   |
#              +-----------------------------+-----------------+
# =============================================================================

attributetype ( 1.3.6.1.4.1.8100.1.2.3.1 NAME 'j2-classname'
	DESC 'The java class name of the object.'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
	SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.8100.1.2.3.2 NAME 'j2-action'
	DESC 'An action associated with a permission. This is a multi-valued attribute.'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.8100.1.2.3.3 NAME 'j2-role'
	DESC 'The UID of an associated Role. This is a multi-valued attribute.'
	EQUALITY caseExactIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.8100.1.2.3.4 NAME 'j2-group'
	DESC 'The UID of an associated Group. This is a multi-valued attribute.'
	EQUALITY caseExactIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.8100.1.2.3.5 NAME 'j2-permission'
	DESC 'The UID of an associated Permission'
	EQUALITY caseExactIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.8100.1.2.3.6 NAME 'creation-date'
	DESC 'create date'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
	SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.8100.1.2.3.7 NAME 'modified-date'
	DESC 'modified date'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
	SINGLE-VALUE )

objectclass ( 1.3.6.1.4.1.8100.1.2.4.1 NAME 'jetspeed-2-group'
	DESC 'Jetspeed-2 group'
	SUP (groupOfUniqueNames)
	MUST ( j2-classname $ uid)
	MAY ( j2-role $ creation-date $ modified-date $ cn $ ou) )

objectclass ( 1.3.6.1.4.1.8100.1.2.4.2 NAME 'jetspeed-2-permission'
	DESC 'Jetspeed-2 permission'
	MUST ( j2-classname $ uid)
	MAY ( j2-action $ creation-date $ modified-date) )

objectclass ( 1.3.6.1.4.1.8100.1.2.4.3 NAME 'jetspeed-2-role'
	DESC 'Jetspeed-2 role'
	SUP (groupOfUniqueNames)
	MUST ( j2-classname $ uid)
	MAY ( creation-date $ modified-date $ cn $ ou) )

objectclass ( 1.3.6.1.4.1.8100.1.2.4.4 NAME 'jetspeed-2-user'
	DESC 'Jetspeed-2 user'
	SUP (inetOrgPerson)
	MUST ( cn $ uid)
	MAY ( j2-role $ j2-group $ j2-permission $ creation-date $ modified-date))