tree d3e684352885974d0f22aa34113d3f1ccd3d940b
parent 583458567282adc738ce937fe956c1fb54ed7987
author Ninad Palsule <ninadpalsule@us.ibm.com> 1685655537 -0500
committer Ed Tanous <ed@tanous.net> 1686090782 +0000

Add AccountTypes in POST Accounts service

This drop adds support to specify AccountTypes at the time of user
creation. Made sure that HostConsole is only supported for user with
administrator role.

Testing:
$ curl -k -X POST https://${bmc}/redfish/v1/AccountService/Accounts
   -d '{"UserName": "user99", "Password": "0penBmc0", "RoleId":
   "Administrator", "AccountTypes": ["HostConsole"]}'
{
  "@Message.ExtendedInfo": [
    {
      "@odata.type": "#Message.v1_1_1.Message",
      "Message": "The resource has been created successfully.",
      "MessageArgs": [],
      "MessageId": "Base.1.13.0.Created",
      "MessageSeverity": "OK",
      "Resolution": "None."
    }
  ]
}
$ curl -k
 https://root:0penBmc@bmc1:443/redfish/v1/AccountService/Accounts/user99
{
  "@odata.id": "/redfish/v1/AccountService/Accounts/user99",
  "@odata.type": "#ManagerAccount.v1_7_0.ManagerAccount",
  "AccountTypes": [
    "HostConsole"
  ],
  "Description": "User Account",
  "Enabled": true,
  "Id": "user99",
  "Links": {
    "Role": {
      "@odata.id": "/redfish/v1/AccountService/Roles/Administrator"
    }
  },
  "Locked": false,
  "Locked@Redfish.AllowableValues": [
    "false"
  ],
  "Name": "User Account",
  "Password": null,
  "PasswordChangeRequired": false,
  "RoleId": "Administrator",
  "StrictAccountTypes": true,
  "UserName": "user99"
}

Also ran following testcases:
$ curl -k -X POST https://${bmc}/redfish/v1/AccountService/Accounts
  -d '{"UserName": "user99", "Password": "0penBmc0", "RoleId":
  "Administrator", "AccountTypes": ["HostConsole"]}'
$ curl -k -X POST https://${bmc}/redfish/v1/AccountService/Accounts
  -d '{"UserName": "user99", "Password": "0penBmc0", "RoleId":
  "Operator", "AccountTypes": ["HostConsole"]}'
$ curl -k -X POST https://${bmc}/redfish/v1/AccountService/Accounts
  -d '{"UserName": "user99", "Password": "0penBmc0", "RoleId":
  "ReadOnly", "AccountTypes": ["HostConsole"]}'
$ curl -k -X POST https://${bmc}/redfish/v1/AccountService/Accounts
  -d '{"UserName": "user99", "Password": "0penBmc0", "RoleId":
  "Administrator", "AccountTypes": ["ManagerConsole"]}'
$ curl -k -X POST https://${bmc}/redfish/v1/AccountService/Accounts
  -d '{"UserName": "user99", "Password": "0penBmc0", "RoleId":
  "Administrator", "AccountTypes": ["Redfish"]}'
$ curl -k -X POST https://${bmc}/redfish/v1/AccountService/Accounts
  -d '{"UserName": "user99", "Password": "0penBmc0", "RoleId":
  "Administrator", "AccountTypes": ["WebUI"]}'
$ curl -k -X POST https://${bmc}/redfish/v1/AccountService/Accounts
  -d '{"UserName": "user99", "Password": "0penBmc0", "RoleId":
  "Administrator", "AccountTypes": ["IPMI"]}'
$ curl -k -X POST https://${bmc}/redfish/v1/AccountService/Accounts
  -d '{"UserName": "user99", "Password": "0penBmc0", "RoleId":
  "Administrator", "AccountTypes": ["Redfish", "IPMI", "HostConsole",
  "ManagerConsole", "WebUI"]}'
$ curl -k -X POST https://${bmc}/redfish/v1/AccountService/Accounts
  -d '{"UserName": "user99", "Password": "0penBmc0", "RoleId":
  "Administrator", "AccountTypes": ["Redfish", "HostConsole",
  "ManagerConsole", "WebUI"]}'
$ curl -k -X POST https://${bmc}/redfish/v1/AccountService/Accounts
  -d '{"UserName": "user99", "Password": "0penBmc0", "RoleId":
  "Administrator", "AccountTypes": ["Redfish", "ManagerConsole",
  "WebUI"]}'
$ curl -k -X POST https://${bmc}/redfish/v1/AccountService/Accounts
  -d '{"UserName": "user99", "Password": "0penBmc0", "RoleId":
  "Administrator", "AccountTypes": ["Redfish", "HostConsole", "WebUI"]}'
$ curl -k -X POST https://${bmc}/redfish/v1/AccountService/Accounts
  -d '{"UserName": "user99", "Password": "0penBmc0", "RoleId":
  "Administrator", "AccountTypes": ["IPMI", "HostConsole",
  "ManagerConsole"]}'
$ curl -k -X POST https://${bmc}/redfish/v1/AccountService/Accounts
  -d '{"UserName": "user99", "Password": "0penBmc0", "RoleId":
  "Operator", "AccountTypes": ["Redfish", "ManagerConsole", "WebUI"]}'
$ curl -k -X POST https://${bmc}/redfish/v1/AccountService/Accounts
  -d '{"UserName": "user99", "Password": "0penBmc0", "RoleId":
  "ReadOnly", "AccountTypes": ["Redfish", "ManagerConsole", "WebUI"]}'

Change-Id: I19ff994e712bcfaf827a5f8dd02a752a6ab92214
Signed-off-by: Ninad Palsule <ninadpalsule@us.ibm.com>