RolePolicy

{
  "properties": {
    "action": {
      "type": "string"
    },
    "operation": {
      "description": "A supported operation, or * / empty for all operations with the selected action. WFS stored-query administration requires manage; transactions and locks require write.",
      "type": "string"
    },
    "service": {
      "type": "string"
    },
    "workspace": {
      "description": "Existing workspace UUID or name (stored as UUID), or * for all workspaces. Removal uses the exact stored scope.",
      "type": "string"
    }
  },
  "required": [
    "workspace",
    "service",
    "action"
  ],
  "type": "object",
  "x-service-operations": {
    "ogc-tiles": {
      "GET": "read",
      "GETTILE": "read",
      "HEAD": "read",
      "LISTCOLLECTIONS": "read"
    },
    "ogcapi": {
      "GET": "read",
      "GETFEATURES": "read",
      "GETITEM": "read",
      "HEAD": "read",
      "LISTCOLLECTIONS": "read"
    },
    "wcs": {
      "DESCRIBECOVERAGE": "read",
      "GETCAPABILITIES": "read",
      "GETCOVERAGE": "read"
    },
    "wfs": {
      "CREATESTOREDQUERY": "manage",
      "DESCRIBEFEATURETYPE": "read",
      "DESCRIBESTOREDQUERIES": "read",
      "DROPSTOREDQUERY": "manage",
      "GETCAPABILITIES": "read",
      "GETFEATURE": "read",
      "GETFEATUREWITHLOCK": "write",
      "GETPROPERTYVALUE": "read",
      "LISTSTOREDQUERIES": "read",
      "LOCKFEATURE": "write",
      "TRANSACTION": "write"
    },
    "wms": {
      "DESCRIBELAYER": "read",
      "GETCAPABILITIES": "read",
      "GETFEATUREINFO": "read",
      "GETLEGENDGRAPHIC": "read",
      "GETMAP": "read"
    },
    "wmts": {
      "GETCAPABILITIES": "read",
      "GETFEATUREINFO": "read",
      "GETTILE": "read"
    }
  }
}