# RBAC — user dashboard feature permissions
#
# Covers: bookmarks, messages, notes, resources — the authenticated user area.
# Enable when using the user dashboard feature.

{
  admin = [],  # admin inherits all via wildcard

  user = [
    { resource = "endpoint", pattern = "/api/server_get_bookmarks*",    outcome = "allow", methods = ["POST"], effects = [] },
    { resource = "endpoint", pattern = "/api/server_add_bookmark*",     outcome = "allow", methods = ["POST"], effects = [] },
    { resource = "endpoint", pattern = "/api/server_remove_bookmark*",  outcome = "allow", methods = ["POST"], effects = [] },
    { resource = "endpoint", pattern = "/api/server_get_messages*",     outcome = "allow", methods = ["POST"], effects = [] },
    { resource = "endpoint", pattern = "/api/server_mark_message_read*",outcome = "allow", methods = ["POST"], effects = [] },
    { resource = "endpoint", pattern = "/api/server_delete_message*",   outcome = "allow", methods = ["POST"], effects = [] },
    { resource = "endpoint", pattern = "/api/server_get_notes*",        outcome = "allow", methods = ["POST"], effects = [] },
    { resource = "endpoint", pattern = "/api/server_create_note*",      outcome = "allow", methods = ["POST"], effects = [] },
    { resource = "endpoint", pattern = "/api/server_update_note*",      outcome = "allow", methods = ["POST"], effects = [] },
    { resource = "endpoint", pattern = "/api/server_delete_note*",      outcome = "allow", methods = ["POST"], effects = [] },
    { resource = "endpoint", pattern = "/api/server_get_resources*",    outcome = "allow", methods = ["POST"], effects = [] },
  ],

  guest = [],
}