24 lines
1.6 KiB
Text
24 lines
1.6 KiB
Text
# RBAC — user dashboard feature permissions
|
|
#
|
|
# Covers: bookmarks, messages, notes, resources — the authenticated user area.
|
|
# Enable when using the user dashboard feature.
|
|
|
|
{
|
|
admin = [], # admin inherits all via wildcard
|
|
|
|
user = [
|
|
{ resource = "endpoint", pattern = "/api/server_get_bookmarks*", outcome = "allow", methods = ["POST"], effects = [] },
|
|
{ resource = "endpoint", pattern = "/api/server_add_bookmark*", outcome = "allow", methods = ["POST"], effects = [] },
|
|
{ resource = "endpoint", pattern = "/api/server_remove_bookmark*", outcome = "allow", methods = ["POST"], effects = [] },
|
|
{ resource = "endpoint", pattern = "/api/server_get_messages*", outcome = "allow", methods = ["POST"], effects = [] },
|
|
{ resource = "endpoint", pattern = "/api/server_mark_message_read*",outcome = "allow", methods = ["POST"], effects = [] },
|
|
{ resource = "endpoint", pattern = "/api/server_delete_message*", outcome = "allow", methods = ["POST"], effects = [] },
|
|
{ resource = "endpoint", pattern = "/api/server_get_notes*", outcome = "allow", methods = ["POST"], effects = [] },
|
|
{ resource = "endpoint", pattern = "/api/server_create_note*", outcome = "allow", methods = ["POST"], effects = [] },
|
|
{ resource = "endpoint", pattern = "/api/server_update_note*", outcome = "allow", methods = ["POST"], effects = [] },
|
|
{ resource = "endpoint", pattern = "/api/server_delete_note*", outcome = "allow", methods = ["POST"], effects = [] },
|
|
{ resource = "endpoint", pattern = "/api/server_get_resources*", outcome = "allow", methods = ["POST"], effects = [] },
|
|
],
|
|
|
|
guest = [],
|
|
}
|