From 265c25d942b3451bd52866e363f1e7440536cf0a Mon Sep 17 00:00:00 2001
From: Niels V <nvdk@users.noreply.github.com>
Date: Fri, 17 Apr 2026 14:40:05 +0200
Subject: [PATCH] don't allow read for cleanup

---
 config/authorization/config.ex | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/authorization/config.ex b/config/authorization/config.ex
index 9d91fd6..0966921 100644
--- a/config/authorization/config.ex
+++ b/config/authorization/config.ex
@@ -303,7 +303,7 @@ defmodule Acl.UserGroups.Config do
       #
       %GraphCleanup{
         originating_graph: "http://mu.semte.ch/application",
-        useage: [:read, :write],
+        useage: [:write],
         name: "clean"
       }
     ]