From 702b06748824611c02f75e240d8459adb24881f4 Mon Sep 17 00:00:00 2001
From: felix <ruiz.felixruiz@gmail.com>
Date: Tue, 15 Sep 2026 23:24:49 +0200
Subject: [PATCH] update config mu-auth

---
 config/authorization/config.lisp | 19 +++++++++++++++++--
 1 file changed, 17 insertions(+), 2 deletions(-)

diff --git a/config/authorization/config.lisp b/config/authorization/config.lisp
index 947f44e..7242593 100644
--- a/config/authorization/config.lisp
+++ b/config/authorization/config.lisp
@@ -364,12 +364,23 @@
       <SESSION_ID> session:account/mu:uuid ?session_account.
     }")
 
+;; Note: this actually a nasty thing in the orginal code. workaround here
+(supply-allowed-group "chat-access"
+  :parameters ()
+  :query "PREFIX ext: <http://mu.semte.ch/vocabularies/ext/>
+    PREFIX mu: <http://mu.semte.ch/vocabularies/core/>
+    PREFIX session: <http://mu.semte.ch/vocabularies/session/>
+    SELECT DISTINCT ?session_role WHERE {
+      <SESSION_ID> ext:sessionRole ?session_role.
+      FILTER( ?session_role = \"ABBOrganisatiePortaalGebruiker-editeerder\" )
+    }")
+
 (grant (read)
   :to-graph (acmidm-lezer acmidm-vendor)
   :for-allowed-group "ABBOrganisatiePortaalGebruiker-lezer")
 
 (grant (read write)
-  :to-graph (acmidm-editeerder acmidm-vendor chat)
+  :to-graph (acmidm-editeerder acmidm-vendor)
   :for-allowed-group "ABBOrganisatiePortaalGebruiker-editeerder")
 
 (grant (read write)
@@ -397,5 +408,9 @@
   :for-allowed-group "o-admin-rwf")
 
 (grant (read write)
-  :to-graph (chat)
+  :to-graph (chat) ;; Note: this actually a nasty thing in the orginal code. workaround here
   :for-allowed-group "chat-owner")
+
+(grant (read)
+  :to-graph (acmidm-editeerder) ;; Note: this actually a nasty thing in the orginal code. workaround here
+  :for-allowed-group "chat-access")