https://wiki.umiacs.umd.edu/adapt/index.php?action=history&feed=atom&title=Saml%3ASamlRolesSaml:SamlRoles - Revision history2026-04-07T16:46:34ZRevision history for this page on the wikiMediaWiki 1.43.7https://wiki.umiacs.umd.edu/adapt/index.php?title=Saml:SamlRoles&diff=1990&oldid=prevScsong at 23:52, 11 September 20082008-09-11T23:52:25Z<p></p>
<p><b>New page</b></p><div>==SAML Roles used in PAWN==<br />
<br />
A more up to date list of these roles can always be found in the SAMLRoles source file in the pawn-ws-sec project.<br />
<br />
* ''urn:pawn:role:user''_ - pawn client, standard user w/ no administrative or management priviledge<br />
<br />
* ''urn:pawn:role:manager'' - domain manager, if a client presents this, you usually check the authority uri in the certificate to make sure the assertion domain matches the domain where the user is trying to act.<br />
<br />
* ''urn:pawn:role:administrator'' - global administrator, usually this should only be trusted from select authorities<br />
<br />
* ''urn:pawn:role:scheduler'' - system role for schedulers talking to receiving servers and possibly managers, this should be restricted to certain authorities.<br />
<br />
-- Main.MikeSmorul - 12 Sep 2005</div>Scsong