diff --git a/config/authorization/config.ex b/config/authorization/config.ex
index f6fa2de..1ba31c2 100644
--- a/config/authorization/config.ex
+++ b/config/authorization/config.ex
@@ -7,92 +7,92 @@ alias Acl.GroupSpec, as: GroupSpec
alias Acl.GroupSpec.GraphCleanup, as: GraphCleanup
defmodule Acl.UserGroups.Config do
-
@error_type [
"https://docs.oasis-open-projects.org/oslc-op/core/v3.0/os/core-vocab.html#Error"
]
@worship_type [
- "http://data.lblod.info/vocabularies/erediensten/EredienstMandataris",
- "http://data.lblod.info/vocabularies/erediensten/BestuurVanDeEredienst",
- "http://data.lblod.info/vocabularies/erediensten/EredienstBestuurseenheid",
- "http://data.lblod.info/vocabularies/erediensten/RolBedienaar",
- "http://data.lblod.info/vocabularies/erediensten/VoorwaardenBedienaar",
- "http://data.lblod.info/vocabularies/erediensten/PositieBedienaar",
- "http://data.lblod.info/vocabularies/erediensten/BetrokkenLokaleBesturen",
- "http://data.lblod.info/vocabularies/erediensten/VerbondenJuridischeStructuren",
- "http://data.lblod.info/vocabularies/erediensten/CentraalBestuurVanDeEredienst",
- "http://data.lblod.info/vocabularies/erediensten/RepresentatiefOrgaan",
+ "http://data.lblod.info/vocabularies/erediensten/EredienstMandataris",
+ "http://data.lblod.info/vocabularies/erediensten/BestuurVanDeEredienst",
+ "http://data.lblod.info/vocabularies/erediensten/EredienstBestuurseenheid",
+ "http://data.lblod.info/vocabularies/erediensten/RolBedienaar",
+ "http://data.lblod.info/vocabularies/erediensten/VoorwaardenBedienaar",
+ "http://data.lblod.info/vocabularies/erediensten/PositieBedienaar",
+ "http://data.lblod.info/vocabularies/erediensten/BetrokkenLokaleBesturen",
+ "http://data.lblod.info/vocabularies/erediensten/VerbondenJuridischeStructuren",
+ "http://data.lblod.info/vocabularies/erediensten/CentraalBestuurVanDeEredienst",
+ "http://data.lblod.info/vocabularies/erediensten/RepresentatiefOrgaan"
]
@public_type [
- "http://www.w3.org/ns/org#Role",
- "http://data.vlaanderen.be/ns/besluit#Bestuurseenheid",
- "http://xmlns.com/foaf/0.1/Person",
- "http://xmlns.com/foaf/0.1/OnlineAccount",
- "http://www.semanticdesktop.org/ontologies/2007/03/22/nfo#FileDataObject",
- "http://www.w3.org/ns/dcat#Dataset",
- "http://www.w3.org/ns/dcat#Distribution",
- "http://www.w3.org/ns/dcat#Catalog",
- "http://mu.semte.ch/vocabularies/ext/GeslachtCode",
- "http://data.lblod.info/vocabularies/leidinggevenden/FunctionarisStatusCode",
- "http://lblod.data.gift/vocabularies/organisatie/OrganisatieStatusCode",
- "http://lblod.data.gift/vocabularies/organisatie/BestuursfunctieCode",
- "http://lblod.data.gift/vocabularies/organisatie/BestuursorgaanClassificatieCode",
- "http://lblod.data.gift/vocabularies/organisatie/MandatarisStatusCode",
- "http://lblod.data.gift/vocabularies/organisatie/BestuurseenheidClassificatieCode",
- "http://lblod.data.gift/vocabularies/organisatie/TypeEredienst",
- "http://www.w3.org/2004/02/skos/core#ConceptScheme",
- "http://lblod.data.gift/vocabularies/organisatie/BedienaarFinancieringCode",
- "http://www.w3.org/2004/02/skos/core#Concept",
- "http://publications.europa.eu/ontology/euvoc#Country",
- "http://lblod.data.gift/vocabularies/organisatie/TypeVestiging",
- "http://lblod.data.gift/vocabularies/organisatie/HelftVerkiezing",
- "http://lblod.data.gift/vocabularies/organisatie/Veranderingsgebeurtenis",
- "http://lblod.data.gift/vocabularies/organisatie/TypeBetrokkenheid",
- "http://lblod.data.gift/vocabularies/organisatie/VoorwaardenBedienaarCriterium",
- "http://lblod.data.gift/vocabularies/organisatie/BedienaarCriteriumBewijsstuk",
- "http://lblod.data.gift/vocabularies/organisatie/EredienstBeroepen",
- "http://lblod.data.gift/vocabularies/organisatie/Rechtsvormtype"
+ "http://www.w3.org/ns/org#Role",
+ "http://data.vlaanderen.be/ns/besluit#Bestuurseenheid",
+ "http://xmlns.com/foaf/0.1/Person",
+ "http://xmlns.com/foaf/0.1/OnlineAccount",
+ "http://www.semanticdesktop.org/ontologies/2007/03/22/nfo#FileDataObject",
+ "http://www.w3.org/ns/dcat#Dataset",
+ "http://www.w3.org/ns/dcat#Distribution",
+ "http://www.w3.org/ns/dcat#Catalog",
+ "http://mu.semte.ch/vocabularies/ext/GeslachtCode",
+ "http://data.lblod.info/vocabularies/leidinggevenden/FunctionarisStatusCode",
+ "http://lblod.data.gift/vocabularies/organisatie/OrganisatieStatusCode",
+ "http://lblod.data.gift/vocabularies/organisatie/BestuursfunctieCode",
+ "http://lblod.data.gift/vocabularies/organisatie/BestuursorgaanClassificatieCode",
+ "http://lblod.data.gift/vocabularies/organisatie/MandatarisStatusCode",
+ "http://lblod.data.gift/vocabularies/organisatie/BestuurseenheidClassificatieCode",
+ "http://lblod.data.gift/vocabularies/organisatie/TypeEredienst",
+ "http://www.w3.org/2004/02/skos/core#ConceptScheme",
+ "http://lblod.data.gift/vocabularies/organisatie/BedienaarFinancieringCode",
+ "http://www.w3.org/2004/02/skos/core#Concept",
+ "http://publications.europa.eu/ontology/euvoc#Country",
+ "http://lblod.data.gift/vocabularies/organisatie/TypeVestiging",
+ "http://lblod.data.gift/vocabularies/organisatie/HelftVerkiezing",
+ "http://lblod.data.gift/vocabularies/organisatie/Veranderingsgebeurtenis",
+ "http://lblod.data.gift/vocabularies/organisatie/TypeBetrokkenheid",
+ "http://lblod.data.gift/vocabularies/organisatie/VoorwaardenBedienaarCriterium",
+ "http://lblod.data.gift/vocabularies/organisatie/BedienaarCriteriumBewijsstuk",
+ "http://lblod.data.gift/vocabularies/organisatie/EredienstBeroepen",
+ "http://lblod.data.gift/vocabularies/organisatie/Rechtsvormtype"
]
@org_type [
- "http://purl.org/dc/terms/Agent",
- "http://www.w3.org/ns/org#Organization",
- "http://data.vlaanderen.be/ns/besluit#Besluit",
- "https://data.vlaanderen.be/ns/besluitvorming#Beslissingsactiviteit",
- "http://www.w3.org/ns/org#Site",
- "http://www.w3.org/ns/locn#Address",
- "http://www.w3.org/ns/person#Person",
- "http://schema.org/ContactPoint",
- "http://data.vlaanderen.be/ns/besluit#Bestuurseenheid",
- "http://data.vlaanderen.be/ns/besluit#Bestuursorgaan",
- "http://www.w3.org/ns/adms#Identifier",
- "https://data.vlaanderen.be/ns/generiek#GestructureerdeIdentificator",
- "http://data.vlaanderen.be/ns/mandaat#Mandaat",
- "http://data.vlaanderen.be/ns/mandaat#Mandataris",
- "http://data.lblod.info/vocabularies/leidinggevenden/Functionaris",
- "http://data.lblod.info/vocabularies/leidinggevenden/Bestuursfunctie",
- "http://lblod.data.gift/vocabularies/organisatie/VeranderingsgebeurtenisResultaat",
- "http://www.w3.org/ns/org#Post",
- "http://www.w3.org/ns/org#ChangeEvent",
- "http://data.lblod.info/vocabularies/contacthub/AgentInPositie"
+ "http://purl.org/dc/terms/Agent",
+ "http://www.w3.org/ns/org#Organization",
+ "http://data.vlaanderen.be/ns/besluit#Besluit",
+ "https://data.vlaanderen.be/ns/besluitvorming#Beslissingsactiviteit",
+ "http://www.w3.org/ns/org#Site",
+ "http://www.w3.org/ns/locn#Address",
+ "http://www.w3.org/ns/person#Person",
+ "http://schema.org/ContactPoint",
+ "http://data.vlaanderen.be/ns/besluit#Bestuurseenheid",
+ "http://data.vlaanderen.be/ns/besluit#Bestuursorgaan",
+ "http://www.w3.org/ns/adms#Identifier",
+ "https://data.vlaanderen.be/ns/generiek#GestructureerdeIdentificator",
+ "http://data.vlaanderen.be/ns/mandaat#Mandaat",
+ "http://data.vlaanderen.be/ns/mandaat#Mandataris",
+ "http://data.lblod.info/vocabularies/leidinggevenden/Functionaris",
+ "http://data.lblod.info/vocabularies/leidinggevenden/Bestuursfunctie",
+ "http://lblod.data.gift/vocabularies/organisatie/VeranderingsgebeurtenisResultaat",
+ "http://www.w3.org/ns/org#Post",
+ "http://www.w3.org/ns/org#ChangeEvent",
+ "http://data.lblod.info/vocabularies/contacthub/AgentInPositie"
]
@shared_protected_type [
- "http://www.w3.org/ns/prov#Location",
- "http://xmlns.com/foaf/0.1/Image",
- "http://www.semanticdesktop.org/ontologies/2007/03/22/nfo#FileDataObject"
+ "http://www.w3.org/ns/prov#Location",
+ "http://xmlns.com/foaf/0.1/Image",
+ "http://www.semanticdesktop.org/ontologies/2007/03/22/nfo#FileDataObject"
]
- defp access_by_role( group_string ) do
+ defp access_by_role(group_string) do
%AccessByQuery{
-# vars: ["session_group","session_role"], todo we might have to create multiple graph depending on role
+ # vars: ["session_group","session_role"], todo we might have to create multiple graph depending on role
vars: [],
- query: sparql_query_for_access_role( group_string ) }
+ query: sparql_query_for_access_role(group_string)
+ }
end
- defp sparql_query_for_access_role( group_string ) do
+ defp sparql_query_for_access_role(group_string) do
"PREFIX ext:
PREFIX mu:
SELECT distinct ?session_group ?session_role WHERE {
@@ -104,11 +104,10 @@ defmodule Acl.UserGroups.Config do
def user_groups do
[
-
%GroupSpec{
name: "acmidm-lezer",
useage: [:read],
- access: access_by_role( "ABBOrganisatiePortaalGebruiker-lezer" ),
+ access: access_by_role("ABBOrganisatiePortaalGebruiker-lezer"),
graphs: [
%GraphSpec{
graph: "http://mu.semte.ch/graphs/administrative-unit",
@@ -121,7 +120,7 @@ defmodule Acl.UserGroups.Config do
%GroupSpec{
name: "acmidm-editeerder",
useage: [:read, :write, :read_for_write],
- access: access_by_role( "ABBOrganisatiePortaalGebruiker-editeerder" ),
+ access: access_by_role("ABBOrganisatiePortaalGebruiker-editeerder"),
graphs: [
%GraphSpec{
graph: "http://mu.semte.ch/graphs/administrative-unit",
@@ -134,7 +133,7 @@ defmodule Acl.UserGroups.Config do
%GroupSpec{
name: "acmidm-beheerder",
useage: [:read, :write, :read_for_write],
- access: access_by_role( "ABBOrganisatiePortaalGebruiker-beheerder" ),
+ access: access_by_role("ABBOrganisatiePortaalGebruiker-beheerder"),
graphs: [
%GraphSpec{
graph: "http://mu.semte.ch/graphs/administrative-unit",
@@ -147,7 +146,7 @@ defmodule Acl.UserGroups.Config do
%GroupSpec{
name: "acmidm-worship-lezer",
useage: [:read],
- access: access_by_role( "ABBOrganisatiePortaalErediensten-lezer" ),
+ access: access_by_role("ABBOrganisatiePortaalErediensten-lezer"),
graphs: [
%GraphSpec{
graph: "http://mu.semte.ch/graphs/worship-service",
@@ -160,7 +159,7 @@ defmodule Acl.UserGroups.Config do
%GroupSpec{
name: "acmidm-worship-editeerder",
useage: [:read, :write, :read_for_write],
- access: access_by_role( "ABBOrganisatiePortaalErediensten-editeerder" ),
+ access: access_by_role("ABBOrganisatiePortaalErediensten-editeerder"),
graphs: [
%GraphSpec{
graph: "http://mu.semte.ch/graphs/worship-service",
@@ -173,7 +172,7 @@ defmodule Acl.UserGroups.Config do
%GroupSpec{
name: "acmidm-worship-beheerder",
useage: [:read, :write, :read_for_write],
- access: access_by_role( "ABBOrganisatiePortaalErediensten-beheerder" ),
+ access: access_by_role("ABBOrganisatiePortaalErediensten-beheerder"),
graphs: [
%GraphSpec{
graph: "http://mu.semte.ch/graphs/worship-service",
@@ -189,10 +188,10 @@ defmodule Acl.UserGroups.Config do
access: %AlwaysAccessible{},
graphs: [
%GraphSpec{
- graph: "http://mu.semte.ch/graphs/public",
- constraint: %ResourceConstraint{
- resource_types: @public_type
- }
+ graph: "http://mu.semte.ch/graphs/public",
+ constraint: %ResourceConstraint{
+ resource_types: @public_type
+ }
},
%GraphSpec{
graph: "http://mu.semte.ch/graphs/shared",
@@ -200,8 +199,8 @@ defmodule Acl.UserGroups.Config do
resource_types: @shared_protected_type ++ @org_type
}
}
-
- ]},
+ ]
+ },
# // CLEANUP
#