sig#751 - Add BPDM Orchestrator Roles

[nicoprow]

Description

As a Cx Operator I want to be able to create technical users with BPDM Orchestrator roles:

• BPDM Orchestrator Admin
• BPDM Orchestrator Task Creator
• BPDM Orchestrator Processor Clean
• BPDM Orchestrator Processor CleanAndSync
• BPDM Orchestrator Processor PoolSync

German Translations:

• BPDM Orchestrator Admin: Vollzugriff auf die Golden Record Tasks
• BPDM Orchestrator Task Creator: Erstelle Golden Record Tasks, lese das Task-Ergebnis und den Status aus
• PDM Orchestrator Processor Clean: Reserviere und bearbeitete Golden Record Tasks im Schritt 'Clean'
• BPDM Orchestrator Processor CleanAndSync: Reserviere und bearbeitete Golden Record Tasks im Schritt 'Clean And Sync'
• BPDM Orchestrator Processor PoolSync: eserviere und bearbeitete Golden Record Tasks im Schritt 'Pool'

Relevant references:

• BPDM Permission documentation
• IAM Issue for BPDM Update
• IAM Pull Request for BPDM Udpate

Acceptance Criteria

• Roles appear in technical user creation for the CX Operator
• Roles do not appear in technical user creation for any other Portal user role

Additional Information

[evegufy]

sig issue eclipse-tractusx/sig-release#751

[evegufy]

Hi @typecastcloud great that you did implement #1002!
In general this change is quite similar, would it be possible that you take it over?

[typecastcloud]

Hi @typecastcloud great that you did implement #1002! In general this change is quite similar, would it be possible that you take it over?

Okay I'll pick it up.

[evegufy]

Hi @typecastcloud I noticed the "new" service accounts from BPDM also need to be added to the Portal seeding (service-account table, to operator company) :

• sa-cl7-cx-1
• sa-cl7-cx-7
• sa-cl25-cx-1
• sa-cl25-cx-2
• sa-cl25-cx-3

Would make sense to combine it with this issue.

[nicoprow]

Added german translations

[typecastcloud]

Test Cases

Hi @MaximilianHauer, is a format like this okay?

Test Case 1: Create Technical User - BPDM Orchestrator Admin

Description: Verify that technical user BPDM Orchestrator Admin with correct roles gets created by CX Operator
Steps:

• Go to technical user management
• Create "BPDM Orchestrator Admin"
• Create token
• Verify roles

Expected Result:

"Cl25-CX-BPDM-Orchestrator": [
  "create_result_poolSync",
  "read_task",
  "create_result_cleanAndSync",
  "create_task",
  "create_reservation_clean",
  "create_reservation_poolSync",
  "create_result_clean",
  "create_reservation_cleanAndSync"
]

or compare roles with eclipse-tractusx/portal-iam#155

Test Case 2: Limited CX Operator Company Access

Description: Verify that only CX Operator can create the new BPDM roles
Steps:

• Login to "non"-CX-Operator company
• Go to technical user management
• Check if any of the new roles or service accounts are are visible

Expected Result:
No BPDM Orchestrator role or service account is available to create or update

Test Case 3: Change secret via Portal

Description: Verify that secret for sa-cl25-cx-3 can be reset
Steps:

• Go to technical user management
• Search for sa-cl25-cx-3
• Open details
• Create token to check if service account works
• Click on Reset Credentials
• Create token to check if service account still works

Expected Result: Secret is changed and works after reset