felix.ruizdearcaute/app-organization-portal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update config mu-auth

Browse Source
This commit is contained in:
felix
2026-09-15 23:24:49 +02:00
parent 2c812ed48b
commit 702b067488
1 changed files with 17 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
config/authorization/config.lisp
View File

@@ -364,12 +364,23 @@
<SESSION_ID> session:account/mu:uuid ?session_account.
}")
;; Note: this actually a nasty thing in the orginal code. workaround here
(supply-allowed-group "chat-access"
:parameters ()
:query "PREFIX ext: <http://mu.semte.ch/vocabularies/ext/>
PREFIX mu: <http://mu.semte.ch/vocabularies/core/>
PREFIX session: <http://mu.semte.ch/vocabularies/session/>
SELECT DISTINCT ?session_role WHERE {
<SESSION_ID> ext:sessionRole ?session_role.
FILTER( ?session_role = \"ABBOrganisatiePortaalGebruiker-editeerder\" )
}")
(grant (read)
:to-graph (acmidm-lezer acmidm-vendor)
:for-allowed-group "ABBOrganisatiePortaalGebruiker-lezer")
(grant (read write)
:to-graph (acmidm-editeerder acmidm-vendor chat)
:to-graph (acmidm-editeerder acmidm-vendor)
:for-allowed-group "ABBOrganisatiePortaalGebruiker-editeerder")
(grant (read write)
@@ -397,5 +408,9 @@
:for-allowed-group "o-admin-rwf")
(grant (read write)
:to-graph (chat)
:to-graph (chat) ;; Note: this actually a nasty thing in the orginal code. workaround here
:for-allowed-group "chat-owner")
(grant (read)
:to-graph (acmidm-editeerder) ;; Note: this actually a nasty thing in the orginal code. workaround here
:for-allowed-group "chat-access")