bump frontend

add contact types (#88 )
* add contact types * move migration to 2022 directory Co-authored-by: Nordine Bittich <nordine@bittich.be>
2022-02-10 14:09:45 +01:00 · 2022-02-10 13:53:48 +01:00 · 2022-02-01 18:05:20 +01:00 · 2022-01-26 15:43:11 +01:00 · 2022-01-25 20:04:18 +01:00 · 2022-01-24 11:28:47 +01:00
45 changed files with 2405 additions and 459 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -22,3 +22,8 @@ DS_STORE

 /config/proxy-https/cert.pem
 /config/proxy-https/key.pem
+
+source.json
+out.json
+security.yml
+config/proxy-https/proxy_ssl.conf
--- a/README.md
+++ b/README.md
@@ -12,14 +12,37 @@ Backend for the Contact Hub application based on the  mu.semte.ch microservices
 You can shut down using `docker-compose stop` and remove everything using `docker-compose rm`.


-## Add username/password for Basic Auth
+### Setting up the delta-producers related services
+To make sure the app can share data, producers need to be set up. There is an intial sync, that is potentially very expensive, and must be started manually

-By default, there are two accounts you can use to log-in using basic auth:
+#### producers administrative-units

- root/root
- contacthub/contacthub
-
-To add new accounts, execute the following command, then add the result to `./config/proxy/nginx.htpasswd`
-
-`docker run --rm --entrypoint htpasswd registry:2.7.0 -bn username password`
+1. make sure the app is up and running, the migrations have run
+2. in docker-compose.override.yml, make sure the following configuration is provided:
+```
+  delta-producer-pub-graph-maintainer-administrative-units:
+    environment:
+      START_INITIAL_SYNC: 'true'
+```
+3. `drc up -d delta-producer-pub-graph-maintainer-administrative-units`
+4. You can follow the status of the job, ideally through the dashboard, but this hasn't been setup yet. The following query should also give results:
+```
+   PREFIX task: <http://redpencil.data.gift/vocabularies/tasks/>
+   PREFIX adms: <http://www.w3.org/ns/adms#>
+   PREFIX dct: <http://purl.org/dc/terms/>

+    SELECT DISTINCT ?job ?operation ?created ?modified ?status WHERE {
+       GRAPH ?g {
+         ?job a <http://vocab.deri.ie/cogs#Job>;
+              task:operation ?operation;
+              adms:status ?status;
+              dct:created ?created;
+              dct:modified ?modified.
+       }
+       FILTER( ?operation IN (
+         <http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/initialPublicationGraphSyncing/administrative-units>,
+         <http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/healingOperation/administrative-units>
+        )
+       )
+     }
+```
--- a/config/authorization/config.ex
+++ b/config/authorization/config.ex
@@ -8,7 +8,8 @@ alias Acl.GroupSpec.GraphCleanup, as: GraphCleanup

 defmodule Acl.UserGroups.Config do
 @protected_resource_type [
-                           "http://www.w3.org/ns/org#Organization",
+                        "http://www.w3.org/ns/org#Organization",
+                        "http://data.vlaanderen.be/ns/besluit#Besluit",
                        "http://data.vlaanderen.be/ns/besluit#Bestuurseenheid",
                        "http://data.lblod.info/vocabularies/erediensten/BestuurVanDeEredienst",
                        "http://data.vlaanderen.be/ns/besluit#Bestuursorgaan",
@@ -24,15 +25,15 @@ defmodule Acl.UserGroups.Config do
                        "http://data.lblod.info/vocabularies/erediensten/VerbondenJuridischeStructuren",
                        "http://www.w3.org/ns/prov#Location",
                        "http://www.w3.org/ns/org#Site",
-                        "http://www.w3.org/ns/locn#Address",                          
+                        "http://www.w3.org/ns/locn#Address",
                        "http://www.w3.org/ns/person#Person",
                        "http://data.vlaanderen.be/ns/mandaat#Mandaat",
                        "http://data.vlaanderen.be/ns/mandaat#Mandataris",
                        "http://data.lblod.info/vocabularies/erediensten/EredienstMandataris",
-                        "http://schema.org/ContactPoint",                          
+                        "http://schema.org/ContactPoint",
                        "http://data.lblod.info/vocabularies/leidinggevenden/Bestuursfunctie",
                        "http://data.lblod.info/vocabularies/erediensten/CentraalBestuurVanDeEredienst",
-                        "http://data.lblod.info/vocabularies/erediensten/RepresentatiefOrgaan",                          
+                        "http://data.lblod.info/vocabularies/erediensten/RepresentatiefOrgaan",
                        "http://www.w3.org/ns/org#Role",
                        "http://www.w3.org/ns/org#Post",
                        "http://data.lblod.info/vocabularies/contacthub/AgentInPositie",
@@ -42,6 +43,7 @@ defmodule Acl.UserGroups.Config do
                        "http://lblod.data.gift/vocabularies/organisatie/TypeEredienst",
                        "http://lblod.data.gift/vocabularies/organisatie/HelftVerkiezing",
                        "http://lblod.data.gift/vocabularies/organisatie/Veranderingsgebeurtenis",
+                        "http://lblod.data.gift/vocabularies/organisatie/VeranderingsgebeurtenisResultaat",
                        "http://lblod.data.gift/vocabularies/organisatie/MandatarisStatusCode",
                        "http://lblod.data.gift/vocabularies/organisatie/BestuurseenheidClassificatieCode",
                        "http://lblod.data.gift/vocabularies/organisatie/TypeBetrokkenheid",
@@ -59,7 +61,8 @@ defmodule Acl.UserGroups.Config do
 ]
  defp access_by_role( group_string ) do
    %AccessByQuery{
-      vars: ["session_group","session_role"],
+#      vars: ["session_group","session_role"], todo we might have to  create multiple graph depending on role
+       vars: [],
      query: sparql_query_for_access_role( group_string ) }
  end

@@ -75,24 +78,39 @@ defmodule Acl.UserGroups.Config do

  def user_groups do
    [
-            %GroupSpec{
-        name: "acmidm",
-        useage: [:read, :write, :read_for_write],
-        access: %AccessByQuery{
-          query: "PREFIX ext: <http://mu.semte.ch/vocabularies/ext/>
-                  PREFIX mu: <http://mu.semte.ch/vocabularies/core/>
-                  PREFIX musession: <http://mu.semte.ch/vocabularies/session/>
-                  SELECT ?s WHERE {
-                    ?s ?p ?o.
-                    FILTER NOT EXISTS {
-                      <SESSION_ID> ext:hasAccount ?account.
-                    }
-                  } LIMIT 1",
-          vars: []
-        },
+       %GroupSpec{
+        name: "acmidm-lezer",
+        useage: [:read],
+        access: access_by_role( "ABBOrganisatiePortaalGebruiker-lezer" ),
        graphs: [
          %GraphSpec{
-            graph: "http://mu.semte.ch/graphs/contacthub/141d9d6b-54af-4d17-b313-8d1c30bc3f5b/ChAdmin",
+            graph: "http://mu.semte.ch/graphs/organisatieportaal",
+            constraint: %ResourceConstraint{
+              resource_types: @protected_resource_type
+            }
+          }
+        ]
+      },
+       %GroupSpec{
+        name: "acmidm-editeerder",
+        useage: [:read, :write, :read_for_write],
+        access: access_by_role( "ABBOrganisatiePortaalGebruiker-editeerder" ),
+        graphs: [
+          %GraphSpec{
+            graph: "http://mu.semte.ch/graphs/organisatieportaal",
+            constraint: %ResourceConstraint{
+              resource_types: @protected_resource_type
+            }
+          }
+        ]
+      },
+       %GroupSpec{
+        name: "acmidm-beheerder",
+        useage: [:read, :write, :read_for_write],
+        access: access_by_role( "ABBOrganisatiePortaalGebruiker-beheerder" ),
+        graphs: [
+          %GraphSpec{
+            graph: "http://mu.semte.ch/graphs/organisatieportaal",
            constraint: %ResourceConstraint{
              resource_types: @protected_resource_type
            }
@@ -100,35 +118,47 @@ defmodule Acl.UserGroups.Config do
        ]
      },
           %GroupSpec{
-        name: "ch-admin",
-        useage: [:read, :write, :read_for_write],
-        access: access_by_role( "ChAdmin" ),
+        name: "ch-lezer",
+        useage: [:read],
+        access: access_by_role( "ABBOrganisatiePortaalGebruiker-lezer" ),
        graphs: [ %GraphSpec{
-                    graph: "http://mu.semte.ch/graphs/contacthub/",
+                    graph: "http://mu.semte.ch/graphs/organisatieportaal",
+                    constraint: %ResourceConstraint{
+                      resource_types: @protected_resource_type } } ] },
+           %GroupSpec{
+        name: "ch-editeerder",
+        useage: [:read, :write, :read_for_write],
+        access: access_by_role( "ABBOrganisatiePortaalGebruiker-editeerder" ),
+        graphs: [ %GraphSpec{
+                    graph: "http://mu.semte.ch/graphs/organisatieportaal",
+                    constraint: %ResourceConstraint{
+                      resource_types: @protected_resource_type } } ] },
+           %GroupSpec{
+        name: "ch-beheerder",
+        useage: [:read, :write, :read_for_write],
+        access: access_by_role( "ABBOrganisatiePortaalGebruiker-beheerder" ),
+        graphs: [ %GraphSpec{
+                    graph: "http://mu.semte.ch/graphs/organisatieportaal",
                    constraint: %ResourceConstraint{
                      resource_types: @protected_resource_type } } ] },
      %GroupSpec{
        name: "public",
        useage: [:read],
-        access: %AlwaysAccessible{}, 
+        access: %AlwaysAccessible{},
        graphs: [ %GraphSpec{
-                    graph: "http://mu.semte.ch/graphs/public",
+                    graph: "http://mu.semte.ch/graphs/public", # mock login only
                    constraint: %ResourceConstraint{
                      resource_types: [
                        "http://data.vlaanderen.be/ns/besluit#Bestuurseenheid",
                        "http://xmlns.com/foaf/0.1/Person",
-                        "http://xmlns.com/foaf/0.1/OnlineAccount"
+                        "http://xmlns.com/foaf/0.1/OnlineAccount",
+                        "http://www.semanticdesktop.org/ontologies/2007/03/22/nfo#FileDataObject",
+                        "http://www.w3.org/ns/dcat#Dataset",
+                        "http://www.w3.org/ns/dcat#Distribution",
+                        "http://www.w3.org/ns/dcat#Catalog"
                      ]
-                    } },
-                  %GraphSpec{
-                    graph: "http://mu.semte.ch/graphs/sessions",
-                    constraint: %ResourceFormatConstraint{
-                      resource_prefix: "http://mu.semte.ch/sessions/"
-                    } } ] },
-  
-     
+                    } }]},

-                      
      # // CLEANUP
      #
      %GraphCleanup{
@@ -138,4 +168,4 @@ defmodule Acl.UserGroups.Config do
      }
    ]
  end
-end
+end
--- a/config/db/virtuoso-production.ini
+++ b/config/db/virtuoso-production.ini
@@ -0,0 +1,253 @@
+;
+;  virtuoso.ini
+;
+;  Configuration file for the OpenLink Virtuoso VDBMS Server
+;
+;  To learn more about this product, or any other product in our
+;  portfolio, please check out our web site at:
+;
+;      http://virtuoso.openlinksw.com/
+;
+;  or contact us at:
+;
+;      general.information@openlinksw.com
+;
+;  If you have any technical questions, please contact our support
+;  staff at:
+;
+;      technical.support@openlinksw.com
+;
+;
+;  Database setup
+;
+[Database]
+DatabaseFile       = /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso.db
+ErrorLogFile       = /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso.log
+LockFile           = /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso.lck
+TransactionFile    = /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso.trx
+xa_persistent_file = /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso.pxa
+ErrorLogLevel      = 7
+FileExtend         = 200
+MaxCheckpointRemap = 17000 ;;niels 1/4 of the number of buffers (assuming db uses most of the available buffers, you can check with `status()` in isql-v
+Striping           = 0
+TempStorage        = TempDatabase
+Syslog             = 1	; write to syslog in case of failures where writing to log is not possible
+
+[TempDatabase]
+DatabaseFile       = /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso-temp.db
+TransactionFile    = /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso-temp.trx
+MaxCheckpointRemap = 2000
+Striping           = 0
+
+;
+;  Server parameters
+;
+[Parameters]
+ServerPort                 = 1111
+LiteMode                   = 0
+DisableUnixSocket          = 1
+DisableTcpSocket           = 0
+;SSLServerPort			= 2111
+;SSLCertificate			= cert.pem
+;SSLPrivateKey			= pk.pem
+;X509ClientVerify		= 0
+;X509ClientVerifyDepth		= 0
+;X509ClientVerifyCAFile		= ca.pem
+MaxClientConnections       = 10
+CheckpointInterval         = 60
+TraceOn                    = errors	; write traces
+O_DIRECT                   = 0
+CaseMode                   = 2
+MaxStaticCursorRows        = 5000
+CheckpointAuditTrail       = 0
+AllowOSCalls               = 0
+SchedulerInterval          = 10
+DirsAllowed                = ., /usr/local/virtuoso-opensource/share/virtuoso/vad
+ThreadCleanupInterval      = 10
+ThreadThreshold            = 10
+ResourcesCleanupInterval   = 10
+FreeTextBatchSize          = 100000
+SingleCPU                  = 0
+VADInstallDir              = /usr/local/virtuoso-opensource/share/virtuoso/vad/
+PrefixResultNames          = 0
+RdfFreeTextRulesSize       = 100
+IndexTreeMaps              = 256
+MaxMemPoolSize             = 200000000
+PrefixResultNames          = 0
+MacSpotlight               = 0
+MaxQueryMem                = 4G	; memory allocated to query processor ;;Niels said to 4g
+VectorSize                 = 1000	; initial parallel query vector (array of query operations) size
+MaxVectorSize              = 1000000	; query vector size threshold.
+AdjustVectorSize           = 0
+ThreadsPerQuery            = 4
+AsyncQueueMaxThreads       = 10
+TransactionAfterImageLimit = 150000000	; max 150MB transaction, total transient consumption is 450MB (roll forward + roll back)
+;;
+;; When running with large data sets, one should configure the Virtuoso
+;; process to use between 2/3 to 3/5 of free system memory and to stripe
+;; storage on all available disks.
+;;
+;; Uncomment next two lines if there is 2 GB system memory free
+;;NumberOfBuffers            = 170000
+;;MaxDirtyBuffers            = 130000
+
+;; Uncomment next two lines if there is 4 GB system memory free
+;;NumberOfBuffers          = 340000
+;;MaxDirtyBuffers          = 250000
+;; Uncomment next two lines if there is 8 GB system memory free
+NumberOfBuffers          = 680000
+MaxDirtyBuffers          = 500000
+;; Uncomment next two lines if there is 16 GB system memory free
+;NumberOfBuffers          = 1360000
+;MaxDirtyBuffers          = 1000000
+;; Uncomment next two lines if there is 32 GB system memory free
+;NumberOfBuffers          = 2720000
+;MaxDirtyBuffers          = 2000000
+;; Uncomment next two lines if there is 48 GB system memory free
+;NumberOfBuffers          = 4000000
+;MaxDirtyBuffers          = 3000000
+;; Uncomment next two lines if there is 64 GB system memory free
+;NumberOfBuffers          = 5450000
+;MaxDirtyBuffers          = 4000000
+;;
+;; Note the default settings will take very little memory
+;; but will not result in very good performance
+;;
+;NumberOfBuffers          = 10000
+;MaxDirtyBuffers          = 6000
+
+;; Introduced after bug with export service
+MaxSortedTopRows = 1000000 ; 1 million!
+
+[HTTPServer]
+ServerPort                  = 8890
+ServerRoot                  = /usr/local/virtuoso-opensource/var/lib/virtuoso/vsp
+MaxClientConnections        = 10
+DavRoot                     = DAV
+EnabledDavVSP               = 0
+HTTPProxyEnabled            = 0
+TempASPXDir                 = 0
+DefaultMailServer           = localhost:25
+ServerThreads               = 10
+MaxKeepAlives               = 10
+KeepAliveTimeout            = 10
+MaxCachedProxyConnections   = 10
+ProxyConnectionCacheTimeout = 15
+HTTPThreadSize              = 280000
+HttpPrintWarningsInOutput   = 0
+Charset                     = UTF-8
+;;HTTPLogFile             = http.log
+MaintenancePage             = atomic.html
+EnabledGzipContent          = 1
+
+[AutoRepair]
+BadParentLinks = 0
+
+[Client]
+SQL_PREFETCH_ROWS  = 100
+SQL_PREFETCH_BYTES = 16000
+SQL_QUERY_TIMEOUT  = 0
+SQL_TXN_TIMEOUT    = 0
+;SQL_NO_CHAR_C_ESCAPE		= 1
+;SQL_UTF8_EXECS			= 0
+;SQL_NO_SYSTEM_TABLES		= 0
+;SQL_BINARY_TIMESTAMP		= 1
+;SQL_ENCRYPTION_ON_PASSWORD	= -1
+
+[VDB]
+ArrayOptimization           = 0
+NumArrayParameters          = 10
+VDBDisconnectTimeout        = 1000
+KeepConnectionOnFixedThread = 0
+
+[Replication]
+ServerName   = db-D602566B774E
+ServerEnable = 1
+QueueMax     = 50000
+
+;
+;  Striping setup
+;
+;  These parameters have only effect when Striping is set to 1 in the
+;  [Database] section, in which case the DatabaseFile parameter is ignored.
+;
+;  With striping, the database is spawned across multiple segments
+;  where each segment can have multiple stripes.
+;
+;  Format of the lines below:
+;    Segment<number> = <size>, <stripe file name> [, <stripe file name> .. ]
+;
+;  <number> must be ordered from 1 up.
+;
+;  The <size> is the total size of the segment which is equally divided
+;  across all stripes forming  the segment. Its specification can be in
+;  gigabytes (g), megabytes (m), kilobytes (k) or in database blocks
+;  (b, the default)
+;
+;  Note that the segment size must be a multiple of the database page size
+;  which is currently 8k. Also, the segment size must be divisible by the
+;  number of stripe files forming  the segment.
+;
+;  The example below creates a 200 meg database striped on two segments
+;  with two stripes of 50 meg and one of 100 meg.
+;
+;  You can always add more segments to the configuration, but once
+;  added, do not change the setup.
+;
+[Striping]
+Segment1 = 100M, db-seg1-1.db, db-seg1-2.db
+Segment2 = 100M, db-seg2-1.db
+;...
+;[TempStriping]
+;Segment1			= 100M, db-seg1-1.db, db-seg1-2.db
+;Segment2			= 100M, db-seg2-1.db
+;...
+;[Ucms]
+;UcmPath			= <path>
+;Ucm1				= <file>
+;Ucm2				= <file>
+;...
+
+[Zero Config]
+ServerName = virtuoso (D602566B774E)
+;ServerDSN			= ZDSN
+;SSLServerName			=
+;SSLServerDSN			=
+
+[Mono]
+;MONO_TRACE			= Off
+;MONO_PATH			= <path_here>
+;MONO_ROOT			= <path_here>
+;MONO_CFG_DIR			= <path_here>
+;virtclr.dll			=
+
+[URIQA]
+DynamicLocal = 0
+DefaultHost  = localhost:8890
+
+[SPARQL]
+;ExternalQuerySource		= 1
+;ExternalXsltSource     = 1
+;DefaultGraph           = http://localhost:8890/dataspace
+;ImmutableGraphs        = http://localhost:8890/dataspace
+ResultSetMaxRows           = 1000000 ; 1 million
+;MaxQueryCostEstimationTime = 4000	; in seconds
+MaxQueryExecutionTime      = 1200	; in seconds
+DefaultQuery               = select distinct ?Concept where {[] a ?Concept} LIMIT 100
+DeferInferenceRulesInit    = 0	; controls inference rules loading
+;PingService            = http://rpc.pingthesemanticweb.com/
+
+[Plugins]
+LoadPath = /usr/local/virtuoso-opensource/lib/virtuoso/hosting
+;Load1				= plain, wikiv
+;Load2				= plain, mediawiki
+;Load3				= plain, creolewiki
+;Load4			= plain, im
+;Load5		= plain, wbxml2
+;Load6			= plain, hslookup
+;Load7			= attach, libphp5.so
+;Load8			= Hosting, hosting_php.so
+;Load9			= Hosting,hosting_perl.so
+;Load10		= Hosting,hosting_python.so
+;Load11		= Hosting,hosting_ruby.so
+;Load12				= msdtc,msdtc_sample
--- a/config/db/virtuoso.ini
+++ b/config/db/virtuoso.ini
@@ -17,85 +17,83 @@
 ;
 ;      technical.support@openlinksw.com
 ;
-
 ;
 ;  Database setup
 ;
 [Database]
-DatabaseFile			= /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso.db
-ErrorLogFile			= /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso.log
-LockFile			= /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso.lck
-TransactionFile			= /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso.trx
-xa_persistent_file		= /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso.pxa
-ErrorLogLevel			= 7
-FileExtend			= 200
-MaxCheckpointRemap		= 2000
-Striping			= 0
-TempStorage			= TempDatabase
-
+DatabaseFile       = /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso.db
+ErrorLogFile       = /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso.log
+LockFile           = /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso.lck
+TransactionFile    = /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso.trx
+xa_persistent_file = /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso.pxa
+ErrorLogLevel      = 7
+FileExtend         = 200
+MaxCheckpointRemap = 8500 ;;niels 1/4 of the number of buffers (assuming db uses most of the available buffers, you can check with `status()` in isql-v
+Striping           = 0
+TempStorage        = TempDatabase
+Syslog             = 1	; write to syslog in case of failures where writing to log is not possible

 [TempDatabase]
-DatabaseFile			= /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso-temp.db
-TransactionFile			= /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso-temp.trx
-MaxCheckpointRemap		= 2000
-Striping			= 0
-
+DatabaseFile       = /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso-temp.db
+TransactionFile    = /usr/local/virtuoso-opensource/var/lib/virtuoso/db/virtuoso-temp.trx
+MaxCheckpointRemap = 2000
+Striping           = 0

 ;
 ;  Server parameters
 ;
 [Parameters]
-ServerPort			= 1111
-LiteMode			= 0
-DisableUnixSocket		= 1
-DisableTcpSocket		= 0
+ServerPort                 = 1111
+LiteMode                   = 0
+DisableUnixSocket          = 1
+DisableTcpSocket           = 0
 ;SSLServerPort			= 2111
 ;SSLCertificate			= cert.pem
 ;SSLPrivateKey			= pk.pem
 ;X509ClientVerify		= 0
 ;X509ClientVerifyDepth		= 0
 ;X509ClientVerifyCAFile		= ca.pem
-MaxClientConnections		= 10
-CheckpointInterval		= 60
-O_DIRECT			= 0
-TraceOn       = errors ; log errors
+MaxClientConnections       = 10
+CheckpointInterval         = 60
+TraceOn                    = errors	; write traces
+O_DIRECT                   = 0
+CaseMode                   = 2
+MaxStaticCursorRows        = 5000
+CheckpointAuditTrail       = 0
+AllowOSCalls               = 0
+SchedulerInterval          = 10
+DirsAllowed                = ., /usr/local/virtuoso-opensource/share/virtuoso/vad
+ThreadCleanupInterval      = 10
+ThreadThreshold            = 10
+ResourcesCleanupInterval   = 10
+FreeTextBatchSize          = 100000
+SingleCPU                  = 0
+VADInstallDir              = /usr/local/virtuoso-opensource/share/virtuoso/vad/
+PrefixResultNames          = 0
+RdfFreeTextRulesSize       = 100
+IndexTreeMaps              = 256
+MaxMemPoolSize             = 200000000
+PrefixResultNames          = 0
+MacSpotlight               = 0
+MaxQueryMem                = 2G
+VectorSize                 = 1000	; initial parallel query vector (array of query operations) size
+MaxVectorSize              = 1000000	; query vector size threshold.
+AdjustVectorSize           = 0
+ThreadsPerQuery            = 4
+AsyncQueueMaxThreads       = 10
 TransactionAfterImageLimit = 150000000	; max 150MB transaction, total transient consumption is 450MB (roll forward + roll back)
-CaseMode			= 2
-MaxStaticCursorRows		= 5000
-CheckpointAuditTrail		= 0
-AllowOSCalls			= 0
-SchedulerInterval		= 10
-DirsAllowed			= ., /usr/local/virtuoso-opensource/share/virtuoso/vad
-ThreadCleanupInterval		= 10
-ThreadThreshold			= 10
-ResourcesCleanupInterval	= 10
-FreeTextBatchSize		= 100000
-SingleCPU			= 0
-VADInstallDir			= /usr/local/virtuoso-opensource/share/virtuoso/vad/
-PrefixResultNames               = 0
-RdfFreeTextRulesSize		= 100
-IndexTreeMaps			= 256
-MaxMemPoolSize                  = 200000000
-PrefixResultNames               = 0
-MacSpotlight                    = 0
-IndexTreeMaps                   = 64
-MaxQueryMem 		 	= 2G		; memory allocated to query processor
-VectorSize 		 	= 1000		; initial parallel query vector (array of query operations) size
-MaxVectorSize 		 	= 1000000	; query vector size threshold.
-AdjustVectorSize 	 	= 1
-ThreadsPerQuery 	 	= 4
-AsyncQueueMaxThreads 	 	= 10
 ;;
 ;; When running with large data sets, one should configure the Virtuoso
 ;; process to use between 2/3 to 3/5 of free system memory and to stripe
 ;; storage on all available disks.
 ;;
 ;; Uncomment next two lines if there is 2 GB system memory free
-NumberOfBuffers          = 170000
-MaxDirtyBuffers          = 130000
+;;NumberOfBuffers            = 170000
+;;MaxDirtyBuffers            = 130000
+
 ;; Uncomment next two lines if there is 4 GB system memory free
-;NumberOfBuffers          = 340000
-; MaxDirtyBuffers          = 250000
+NumberOfBuffers          = 340000
+MaxDirtyBuffers          = 250000
 ;; Uncomment next two lines if there is 8 GB system memory free
 ;NumberOfBuffers          = 680000
 ;MaxDirtyBuffers          = 500000
@@ -111,38 +109,45 @@ MaxDirtyBuffers          = 130000
 ;; Uncomment next two lines if there is 64 GB system memory free
 ;NumberOfBuffers          = 5450000
 ;MaxDirtyBuffers          = 4000000
+;;
+;; Note the default settings will take very little memory
+;; but will not result in very good performance
+;;
+;NumberOfBuffers          = 10000
+;MaxDirtyBuffers          = 6000

+;; Introduced after bug with export service
+MaxSortedTopRows = 1000000 ; 1 million!

 [HTTPServer]
-ServerPort			= 8890
-ServerRoot			= /usr/local/virtuoso-opensource/var/lib/virtuoso/vsp
-MaxClientConnections		= 10
-DavRoot				= DAV
-EnabledDavVSP			= 0
-HTTPProxyEnabled		= 0
-TempASPXDir			= 0
-DefaultMailServer		= localhost:25
-ServerThreads			= 10
-MaxKeepAlives			= 10
-KeepAliveTimeout		= 10
-MaxCachedProxyConnections	= 10
-ProxyConnectionCacheTimeout	= 15
-HTTPThreadSize			= 280000
-HttpPrintWarningsInOutput	= 0
-Charset				= UTF-8
-;;HTTPLogFile		        = http.log
-MaintenancePage             	= atomic.html
-EnabledGzipContent          	= 1
-
+ServerPort                  = 8890
+ServerRoot                  = /usr/local/virtuoso-opensource/var/lib/virtuoso/vsp
+MaxClientConnections        = 10
+DavRoot                     = DAV
+EnabledDavVSP               = 0
+HTTPProxyEnabled            = 0
+TempASPXDir                 = 0
+DefaultMailServer           = localhost:25
+ServerThreads               = 10
+MaxKeepAlives               = 10
+KeepAliveTimeout            = 10
+MaxCachedProxyConnections   = 10
+ProxyConnectionCacheTimeout = 15
+HTTPThreadSize              = 280000
+HttpPrintWarningsInOutput   = 0
+Charset                     = UTF-8
+;;HTTPLogFile             = http.log
+MaintenancePage             = atomic.html
+EnabledGzipContent          = 1

 [AutoRepair]
-BadParentLinks			= 0
+BadParentLinks = 0

 [Client]
-SQL_PREFETCH_ROWS		= 100
-SQL_PREFETCH_BYTES		= 16000
-SQL_QUERY_TIMEOUT		= 0
-SQL_TXN_TIMEOUT			= 0
+SQL_PREFETCH_ROWS  = 100
+SQL_PREFETCH_BYTES = 16000
+SQL_QUERY_TIMEOUT  = 0
+SQL_TXN_TIMEOUT    = 0
 ;SQL_NO_CHAR_C_ESCAPE		= 1
 ;SQL_UTF8_EXECS			= 0
 ;SQL_NO_SYSTEM_TABLES		= 0
@@ -150,16 +155,15 @@ SQL_TXN_TIMEOUT			= 0
 ;SQL_ENCRYPTION_ON_PASSWORD	= -1

 [VDB]
-ArrayOptimization		= 0
-NumArrayParameters		= 10
-VDBDisconnectTimeout		= 1000
-KeepConnectionOnFixedThread	= 0
+ArrayOptimization           = 0
+NumArrayParameters          = 10
+VDBDisconnectTimeout        = 1000
+KeepConnectionOnFixedThread = 0

 [Replication]
-ServerName			= db-D602566B774E
-ServerEnable			= 1
-QueueMax			= 50000
-
+ServerName   = db-D602566B774E
+ServerEnable = 1
+QueueMax     = 50000

 ;
 ;  Striping setup
@@ -191,28 +195,24 @@ QueueMax			= 50000
 ;  added, do not change the setup.
 ;
 [Striping]
-Segment1			= 100M, db-seg1-1.db, db-seg1-2.db
-Segment2			= 100M, db-seg2-1.db
+Segment1 = 100M, db-seg1-1.db, db-seg1-2.db
+Segment2 = 100M, db-seg2-1.db
 ;...
-
 ;[TempStriping]
 ;Segment1			= 100M, db-seg1-1.db, db-seg1-2.db
 ;Segment2			= 100M, db-seg2-1.db
 ;...
-
 ;[Ucms]
 ;UcmPath			= <path>
 ;Ucm1				= <file>
 ;Ucm2				= <file>
 ;...

-
 [Zero Config]
-ServerName			= virtuoso (D602566B774E)
+ServerName = virtuoso (D602566B774E)
 ;ServerDSN			= ZDSN
-;SSLServerName			= 
-;SSLServerDSN			= 
-
+;SSLServerName			=
+;SSLServerDSN			=

 [Mono]
 ;MONO_TRACE			= Off
@@ -221,31 +221,28 @@ ServerName			= virtuoso (D602566B774E)
 ;MONO_CFG_DIR			= <path_here>
 ;virtclr.dll			=

-
 [URIQA]
-DynamicLocal			= 0
-DefaultHost			= localhost:8890
-
+DynamicLocal = 0
+DefaultHost  = localhost:8890

 [SPARQL]
 ;ExternalQuerySource		= 1
-;ExternalXsltSource 		= 1
-;DefaultGraph      		= http://localhost:8890/dataspace
-;ImmutableGraphs    		= http://localhost:8890/dataspace
-ResultSetMaxRows           	= 10000
-MaxQueryCostEstimationTime 	= 400	; in seconds
-MaxQueryExecutionTime      	= 60	; in seconds
-DefaultQuery               	= select distinct ?Concept where {[] a ?Concept} LIMIT 100
-DeferInferenceRulesInit    	= 0  ; controls inference rules loading
-;PingService       		= http://rpc.pingthesemanticweb.com/
-
+;ExternalXsltSource     = 1
+;DefaultGraph           = http://localhost:8890/dataspace
+;ImmutableGraphs        = http://localhost:8890/dataspace
+ResultSetMaxRows           = 1000000 ; 1 million
+;MaxQueryCostEstimationTime = 4000	; in seconds
+MaxQueryExecutionTime      = 1200	; in seconds
+DefaultQuery               = select distinct ?Concept where {[] a ?Concept} LIMIT 100
+DeferInferenceRulesInit    = 0	; controls inference rules loading
+;PingService            = http://rpc.pingthesemanticweb.com/

 [Plugins]
-LoadPath			= /usr/local/virtuoso-opensource/lib/virtuoso/hosting
+LoadPath = /usr/local/virtuoso-opensource/lib/virtuoso/hosting
 ;Load1				= plain, wikiv
 ;Load2				= plain, mediawiki
 ;Load3				= plain, creolewiki
-;Load4			= plain, im 
+;Load4			= plain, im
 ;Load5		= plain, wbxml2
 ;Load6			= plain, hslookup
 ;Load7			= attach, libphp5.so
@@ -253,4 +250,4 @@ LoadPath			= /usr/local/virtuoso-opensource/lib/virtuoso/hosting
 ;Load9			= Hosting,hosting_perl.so
 ;Load10		= Hosting,hosting_python.so
 ;Load11		= Hosting,hosting_ruby.so
-;Load12				= msdtc,msdtc_sample
+;Load12				= msdtc,msdtc_sample
--- a/config/delta-producer/administrative-units/export.json
+++ b/config/delta-producer/administrative-units/export.json
@@ -0,0 +1,65 @@
+{
+  "export": [
+    {
+      "type": "http://lblod.data.gift/vocabularies/organisatie/BestuurseenheidClassificatieCode",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://mu.semte.ch/vocabularies/core/uuid",
+        "http://www.w3.org/2004/02/skos/core#prefLabel",
+        "http://www.w3.org/2004/02/skos/core#scopeNote"
+      ]
+    },
+    {
+      "type": "http://data.vlaanderen.be/ns/besluit#Bestuurseenheid",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://mu.semte.ch/vocabularies/core/uuid",
+        "http://www.w3.org/2004/02/skos/core#prefLabel",
+        "http://www.w3.org/2004/02/skos/core#altLabel",
+        "http://data.vlaanderen.be/ns/besluit#werkingsgebied",
+        "http://www.w3.org/ns/org#classification"
+      ]
+    },
+    {
+      "type": "http://data.vlaanderen.be/ns/besluit#Bestuursorgaan",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://mu.semte.ch/vocabularies/core/uuid",
+        "http://www.w3.org/2004/02/skos/core#prefLabel",
+        "http://data.vlaanderen.be/ns/besluit#bestuurt",
+        "http://www.w3.org/ns/org#classification",
+        "http://data.vlaanderen.be/ns/mandaat#bindingEinde",
+        "http://data.vlaanderen.be/ns/mandaat#bindingStart",
+        "https://data.vlaanderen.be/ns/generiek#isTijdspecialisatieVan"
+      ]
+    },
+    {
+      "type": "http://lblod.data.gift/vocabularies/organisatie/BestuursorgaanClassificatieCode",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://mu.semte.ch/vocabularies/core/uuid",
+        "http://www.w3.org/2004/02/skos/core#prefLabel",
+        "http://www.w3.org/2004/02/skos/core#scopeNote"
+      ]
+    },
+    {
+      "type": "http://www.w3.org/ns/prov#Location",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://mu.semte.ch/vocabularies/core/uuid",
+        "http://www.w3.org/2000/01/rdf-schema#label",
+        "http://mu.semte.ch/vocabularies/ext/werkingsgebiedNiveau"
+      ]
+    }
+  ]
+}
--- a/config/delta-producer/dump-file-publisher/config.json
+++ b/config/delta-producer/dump-file-publisher/config.json
@@ -0,0 +1,22 @@
+{
+  "http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/deltaDumpFileCreation/administrative-units" : {
+    "dcatDataSetSubject": "http://data.lblod.info/datasets/delta-producer/dumps/AdministrativeUnitsCacheGraphDump",
+    "targetGraph": "http://redpencil.data.gift/id/deltas/producer/administrative-units",
+    "fileBaseName": "dump-administrative-units"
+  },
+  "http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/initialPublicationGraphSyncing/administrative-units" : {
+    "dcatDataSetSubject": "http://data.lblod.info/datasets/delta-producer/dumps/AdministrativeUnitsCacheGraphDump",
+    "targetGraph": "http://redpencil.data.gift/id/deltas/producer/administrative-units",
+    "fileBaseName": "dump-administrative-units"
+  },
+  "http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/deltaDumpFileCreation/organizations" : {
+    "dcatDataSetSubject": "http://data.lblod.info/datasets/delta-producer/dumps/OrganizationsCacheGraphDump",
+    "targetGraph": "http://redpencil.data.gift/id/deltas/producer/organizations",
+    "fileBaseName": "dump-organizations"
+  },
+  "http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/initialPublicationGraphSyncing/organizations" : {
+    "dcatDataSetSubject": "http://data.lblod.info/datasets/delta-producer/dumps/OrganizationsCacheGraphDump",
+    "targetGraph": "http://redpencil.data.gift/id/deltas/producer/organizations",
+    "fileBaseName": "dump-organizations"
+  }
+}
--- a/config/delta-producer/organizations/export.json
+++ b/config/delta-producer/organizations/export.json
@@ -0,0 +1,421 @@
+{
+  "export": [
+    {
+      "type": "http://www.w3.org/ns/person#Person",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [ 
+        "http://xmlns.com/foaf/0.1/givenName",
+        "http://xmlns.com/foaf/0.1/familyName",
+        "https://data.vlaanderen.be/ns/persoon#gebruikteVoornaam",
+        "http://data.vlaanderen.be/ns/mandaat#isAangesteldAls",
+        "http://www.w3.org/ns/org#heldBy"
+      ]
+    },
+    {
+      "type": "http://lblod.data.gift/vocabularies/organisatie/MandatarisStatusCode",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel"
+      ]
+    },
+    {
+      "type": "http://data.lblod.info/vocabularies/erediensten/EredienstMandataris",
+      "strictTypeExport": "true",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://data.lblod.info/vocabularies/contacthub/startdatum",
+        "http://data.lblod.info/vocabularies/contacthub/eindedatum",
+        "http://www.w3.org/ns/org#holds",
+        "http://www.w3.org/ns/org#heldBy",
+        "http://schema.org/contactPoint",
+        "http://data.vlaanderen.be/ns/mandaat#start",
+        "http://data.vlaanderen.be/ns/mandaat#einde",
+        "http://data.vlaanderen.be/ns/mandaat#status",
+        "http://data.vlaanderen.be/ns/mandaat#isBestuurlijkeAliasVan",
+        "http://data.lblod.info/vocabularies/erediensten/geplandeEinddatumAanstelling",
+        "http://data.lblod.info/vocabularies/erediensten/redenVanStopzetting",
+        "http://data.lblod.info/vocabularies/erediensten/typeHelft"
+      ]
+    },
+    {
+      "type": "http://lblod.data.gift/vocabularies/organisatie/HelftVerkiezing",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel"
+      ]
+    },
+    {
+      "type": "http://schema.org/ContactPoint",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://schema.org/email",
+        "http://schema.org/faxNumber",
+        "http://schema.org/telephone",
+        "http://www.w3.org/ns/locn#address"
+      ]
+    },
+    {
+      "type": "http://data.vlaanderen.be/ns/mandaat#Mandaat",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/ns/org#role",
+        "http://www.w3.org/ns/org#postIn",
+        "http://www.w3.org/ns/org#role"
+      ]
+    },
+    {
+      "type": "http://lblod.data.gift/vocabularies/organisatie/BestuursfunctieCode",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel"
+      ]
+    },
+    {
+      "type": "http://www.w3.org/ns/org#Role",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel"
+      ]
+    },
+    {
+      "type": "http://lblod.data.gift/vocabularies/organisatie/BestuurseenheidClassificatieCode",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel"
+      ]
+    },
+    {
+      "type": "http://lblod.data.gift/vocabularies/organisatie/TypeEredienst",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel"
+      ]
+    },
+    {
+      "type": "http://data.lblod.info/vocabularies/erediensten/BestuurVanDeEredienst",
+      "strictTypeExport": "true",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel",
+        "http://www.w3.org/2004/02/skos/core#altLabel",
+        "http://www.w3.org/ns/adms#identifier",
+        "http://www.w3.org/ns/regorg#orgStatus",
+        "http://www.w3.org/ns/org#hasPrimarySite",
+        "http://www.w3.org/ns/org#hasSite",
+        "http://www.w3.org/ns/org#changedBy",
+        "http://www.w3.org/ns/org#resultedFrom",
+        "http://www.w3.org/ns/org#hasPost",
+        "http://www.w3.org/ns/org#linkedTo",
+        "http://www.w3.org/ns/org#hasSubOrganization",
+        "http://www.w3.org/ns/org#classification",
+        "http://data.lblod.info/vocabularies/erediensten/betrokkenBestuur",
+        "http://mu.semte.ch/vocabularies/ext/werkingsgebiedNiveau",
+        "http://data.lblod.info/vocabularies/erediensten/denominatie",
+        "http://data.lblod.info/vocabularies/erediensten/grensoverschrijdend",
+        "http://data.lblod.info/vocabularies/erediensten/wordtBediendDoor",
+        "http://data.lblod.info/vocabularies/erediensten/typeEredienst"
+      ]
+    },
+    {
+      "type": "http://data.lblod.info/vocabularies/erediensten/CentraalBestuurVanDeEredienst",
+      "strictTypeExport": "true",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel",
+        "http://www.w3.org/2004/02/skos/core#altLabel",
+        "http://www.w3.org/ns/adms#identifier",
+        "http://www.w3.org/ns/regorg#orgStatus",
+        "http://www.w3.org/ns/org#hasPrimarySite",
+        "http://www.w3.org/ns/org#hasSite",
+        "http://www.w3.org/ns/org#changedBy",
+        "http://www.w3.org/ns/org#resultedFrom",
+        "http://www.w3.org/ns/org#hasPost",
+        "http://www.w3.org/ns/org#linkedTo",
+        "http://www.w3.org/ns/org#hasSubOrganization",
+        "http://www.w3.org/ns/org#classification",
+        "http://data.lblod.info/vocabularies/erediensten/betrokkenBestuur",
+        "http://mu.semte.ch/vocabularies/ext/werkingsgebiedNiveau",
+        "http://data.lblod.info/vocabularies/erediensten/typeEredienst"
+      ]
+    },
+    {
+      "type": "http://data.lblod.info/vocabularies/erediensten/RepresentatiefOrgaan",
+      "strictTypeExport": "true",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel",
+        "http://www.w3.org/2004/02/skos/core#altLabel",
+        "http://www.w3.org/ns/adms#identifier",
+        "http://www.w3.org/ns/regorg#orgStatus",
+        "http://www.w3.org/ns/org#hasPrimarySite",
+        "http://www.w3.org/ns/org#hasSite",
+        "http://www.w3.org/ns/org#changedBy",
+        "http://www.w3.org/ns/org#resultedFrom",
+        "http://www.w3.org/ns/org#hasPost",
+        "http://www.w3.org/ns/org#linkedTo",
+        "http://www.w3.org/ns/org#hasSubOrganization",
+        "http://data.lblod.info/vocabularies/erediensten/typeEredienst"
+      ]
+    },
+    {
+      "type": "http://data.vlaanderen.be/ns/besluit#Bestuursorgaan",
+      "strictTypeExport": "true",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://data.vlaanderen.be/ns/mandaat#bindingEinde",
+        "http://data.vlaanderen.be/ns/mandaat#bindingStart",
+        "http://data.vlaanderen.be/ns/besluit#bestuurt",
+        "http://www.w3.org/ns/org#classification",
+        "https://data.vlaanderen.be/ns/generiek#isTijdspecialisatieVan",
+        "http://www.w3.org/ns/org#hasPost"
+      ]
+    },
+    {
+      "type": "http://lblod.data.gift/vocabularies/organisatie/BestuursorgaanClassificatieCode",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel"
+      ]
+    },
+    {
+      "type": "http://data.lblod.info/vocabularies/erediensten/BetrokkenLokaleBesturen",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://data.lblod.info/vocabularies/erediensten/financieringspercentage",
+        "http://data.lblod.info/vocabularies/erediensten/typebetrokkenheid",
+        "http://www.w3.org/ns/org#organization"
+      ]
+    },
+    {
+      "type": "http://www.w3.org/ns/adms#Identifier",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#notation",
+        "https://data.vlaanderen.be/ns/generiek#gestructureerdeIdentificator"
+      ]
+    },
+    {
+      "type": "https://data.vlaanderen.be/ns/generiek#GestructureerdeIdentificator",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "https://data.vlaanderen.be/ns/generiek#lokaleIdentificator"
+      ]
+    },
+    {
+      "type": "http://www.w3.org/ns/locn#Address",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "https://data.vlaanderen.be/ns/adres#Adresvoorstelling.huisnummer",
+        "https://data.vlaanderen.be/ns/adres#Adresvoorstelling.busnummer",
+        "http://www.w3.org/ns/locn#thoroughfare",
+        "http://www.w3.org/ns/locn#postCode",
+        "https://data.vlaanderen.be/ns/adres#gemeentenaam",
+        "http://www.w3.org/ns/locn#adminUnitL2",
+        "https://data.vlaanderen.be/ns/adres#land",
+        "http://www.w3.org/ns/locn#fullAddress",
+        "https://data.vlaanderen.be/ns/adres#verwijstNaar",
+        "http://purl.org/dc/terms/source"
+      ]
+    },
+    {
+      "type": "http://www.w3.org/ns/org#Site",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/ns/org#siteAddress",
+        "https://data.vlaanderen.be/ns/organisatie#bestaatUit",
+        "http://data.lblod.info/vocabularies/erediensten/vestigingstype"
+      ]
+    },
+    {
+      "type": "http://www.w3.org/ns/org#ChangeEvent",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://purl.org/dc/terms/date",
+        "http://purl.org/dc/terms/description",
+        "http://data.lblod.info/vocabularies/contacthub/typeWijziging",
+        "http://www.w3.org/ns/org#resultedFrom",
+        "http://www.w3.org/ns/org#changedBy"
+      ]
+    },
+    {
+      "type": "http://lblod.data.gift/vocabularies/organisatie/Veranderingsgebeurtenis",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel"
+      ]
+    },
+    {
+      "type": "http://www.w3.org/2004/02/skos/core#Concept",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel"
+      ]
+    },
+    {
+      "type": "http://lblod.data.gift/vocabularies/organisatie/OrganisatieStatusCode",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel"
+      ]
+    },
+    {
+      "type": "http://www.w3.org/ns/prov#Location",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2000/01/rdf-schema#label",
+        "http://mu.semte.ch/vocabularies/ext/werkingsgebiedNiveau",
+        "http://data.vlaanderen.be/ns/besluit#werkingsgebied"
+      ]
+    },
+    {
+      "type": "http://lblod.data.gift/vocabularies/organisatie/TypeBetrokkenheid",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel"
+      ]
+    },
+    {
+      "type": "http://data.lblod.info/vocabularies/erediensten/RolBedienaar", 
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://data.lblod.info/vocabularies/contacthub/startdatum",
+        "http://data.lblod.info/vocabularies/contacthub/eindedatum",
+        "http://www.w3.org/ns/org#holds",
+        "http://www.w3.org/ns/org#heldBy",
+        "http://schema.org/contactPoint",
+        "http://data.lblod.info/vocabularies/erediensten/financiering",
+        "http://data.lblod.info/vocabularies/erediensten/voldoetAan"
+      ]
+    },
+    {
+      "type": "http://data.lblod.info/vocabularies/erediensten/VoorwaardenBedienaar",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://data.lblod.info/vocabularies/erediensten/voldaan",
+        "http://data.lblod.info/vocabularies/erediensten/criterium",
+        "http://data.lblod.info/vocabularies/erediensten/criteriumbewijsstuktype"
+      ]
+    },{
+      "type": "http://publications.europa.eu/ontology/euvoc#Country",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel",
+        "http://www.w3.org/2000/01/rdf-schema#label"
+      ]
+    },{
+      "type": "http://data.lblod.info/vocabularies/erediensten/PositieBedienaar",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/ns/org#role",
+        "http://www.w3.org/ns/org#postIn",
+        "http://data.lblod.info/vocabularies/erediensten/functie",
+        "http://data.lblod.info/vocabularies/erediensten/behoort"
+      ]
+    },
+    {
+      "type": "http://lblod.data.gift/vocabularies/organisatie/EredienstBeroepen",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel"
+      ]
+    },
+    {
+      "type": "http://lblod.data.gift/vocabularies/organisatie/BedienaarFinanceringCode",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel"
+      ]
+    },
+    {
+      "type": "http://lblod.data.gift/vocabularies/organisatie/VoorwaardenBedienaarCriterium",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel"
+      ]
+    },
+    {
+      "type": "http://lblod.data.gift/vocabularies/organisatie/BedienaarCriteriumBewijsstuk",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel"
+      ]
+    },
+    {
+      "type": "http://lblod.data.gift/vocabularies/organisatie/TypeVestiging",
+      "graphsFilter": [
+        "http://mu.semte.ch/graphs/organisatieportaal"
+      ],
+      "properties": [
+        "http://www.w3.org/2004/02/skos/core#prefLabel"
+      ]
+    }
+  ]
+}
--- a/config/delta/rules.js
+++ b/config/delta/rules.js
@@ -1,16 +1,112 @@
 export default [
-    {
-      match: {
-        subject: {
-        }
-      },
-      callback: {
-        url: "http://kalliope-api/delta", method: "POST"
-      },
-      options: {
-        resourceFormat: "v0.0.1",
-        gracePeriod: 1000,
-        ignoreFromSelf: true
+  {
+    match: {
+      predicate: {
+        type: 'uri',
+        value: 'http://www.w3.org/ns/adms#status'
      }
+    },
+    callback: {
+      method: 'POST',
+      url: 'http://jobs-controller/delta'
+    },
+    options: {
+      resourceFormat: 'v0.0.1',
+      gracePeriod: 1000,
+      ignoreFromSelf: true,
+      optOutMuScopeIds: [ "http://redpencil.data.gift/id/concept/muScope/deltas/initialSync" ]
    }
-  ]
+  },
+  {
+    match: {
+    },
+    callback: {
+      url: 'http://delta-producer-pub-graph-maintainer-administrative-units/delta',
+      method: 'POST'
+    },
+    options: {
+      resourceFormat: 'v0.0.1',
+      gracePeriod: 1000,
+      ignoreFromSelf: true,
+      optOutMuScopeIds: [
+                          "http://redpencil.data.gift/id/concept/muScope/deltas/initialSync",
+                          "http://redpencil.data.gift/id/concept/muScope/deltas/publicationGraphMaintenance"
+                        ]
+    }
+  },
+  {
+    match: {
+      graph: {
+        type: 'uri',
+        value: 'http://redpencil.data.gift/id/deltas/producer/administrative-units'
+      }
+    },
+    callback: {
+      url: 'http://delta-producer-json-diff-publisher-administrative-units/delta',
+      method: 'POST'
+    },
+    options: {
+      resourceFormat: 'v0.0.1',
+      gracePeriod: 1000,
+      ignoreFromSelf: true,
+      optOutMuScopeIds: [ "http://redpencil.data.gift/id/concept/muScope/deltas/initialSync" ]
+    }
+  },
+  {
+    match: {
+    },
+    callback: {
+      url: 'http://delta-producer-pub-graph-maintainer-organizations/delta',
+      method: 'POST'
+    },
+    options: {
+      resourceFormat: 'v0.0.1',
+      gracePeriod: 1000,
+      ignoreFromSelf: true,
+      optOutMuScopeIds: [
+                          "http://redpencil.data.gift/id/concept/muScope/deltas/initialSync",
+                          "http://redpencil.data.gift/id/concept/muScope/deltas/publicationGraphMaintenance"
+                        ]
+    }
+  },
+  {
+    match: {
+      graph: {
+        type: 'uri',
+        value: 'http://redpencil.data.gift/id/deltas/producer/organizations'
+      }
+    },
+    callback: {
+      url: 'http://delta-producer-json-diff-publisher-organizations/delta',
+      method: 'POST'
+    },
+    options: {
+      resourceFormat: 'v0.0.1',
+      gracePeriod: 1000,
+      ignoreFromSelf: true,
+      optOutMuScopeIds: [ "http://redpencil.data.gift/id/concept/muScope/deltas/initialSync" ]
+    }
+  },
+  {
+    match: {
+      predicate: {
+        type: 'uri',
+        value: 'http://www.w3.org/ns/adms#status'
+      },
+      object: {
+        type: 'uri',
+        value: 'http://redpencil.data.gift/id/concept/JobStatus/scheduled'
+      }
+    },
+    callback: {
+      url: 'http://delta-producer-dump-file-publisher/delta',
+      method: 'POST'
+    },
+    options: {
+      resourceFormat: 'v0.0.1',
+      gracePeriod: 1000,
+      ignoreFromSelf: true,
+      optOutMuScopeIds: [ "http://redpencil.data.gift/id/concept/muScope/deltas/initialSync" ]
+    }
+  }
+]
--- a/config/dev-migrations/20210910120000-pseudonimize-UPDATE-BEFORE-RUNNING.sparql.disabled
+++ b/config/dev-migrations/20210910120000-pseudonimize-UPDATE-BEFORE-RUNNING.sparql.disabled
--- a/config/dev-migrations/20211209101400-mock-change-events.graph
+++ b/config/dev-migrations/20211209101400-mock-change-events.graph
@@ -0,0 +1 @@
+http://mu.semte.ch/graphs/organisatieportaal
--- a/config/dev-migrations/20211209101400-mock-change-events.ttl
+++ b/config/dev-migrations/20211209101400-mock-change-events.ttl
@@ -0,0 +1,250 @@
+# Notes:
+# - current implementation has too many CE's.
+# <http://lblod.data.gift/concepts/63cc561de9188d64ba5840a42ae8f0d6> : Actief
+# <http://lblod.data.gift/concepts/abf4fee82019f88cf122f986830621ab> In oprichting
+# <http://lblod.data.gift/concepts/d02c4e12bf88d2fdf5123b07f29c9311> Niet Actief
+
+#<http://lblod.data.gift/concepts/343a00884d012cee6915bc7559cd69ef>
+#  skos:prefLabel  "Erkenning niet toegekend" .
+#<http://lblod.data.gift/concepts/6651dc69b0ae8f7ff9974e8a23db1dec>
+#  skos:prefLabel  "Naamswijziging" .
+#<http://lblod.data.gift/concepts/3dd7550843eaf18e1fa1ca6c6c3f2610>
+#  skos:prefLabel  "Erkenning toegekend" .
+#<http://lblod.data.gift/concepts/4297bc56c1a874240e4566e2c5b8816f>
+#  skos:prefLabel  "Erkenning opgeheven" .
+#concepts:d7bbc0ea17fccf7ea35c552d757c905f
+#  skos:prefLabel  "Samenvoeging" .
+#<http://lblod.data.gift/concepts/9f19f14910245f9b14737f1f1a2067f2>
+#  skos:prefLabel  "Wijziging Gebiedsomschrijving" .
+
+PREFIX rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#>
+PREFIX rdfs: <http://www.w3.org/2000/01/rdf-schema#>
+PREFIX skos: <http://www.w3.org/2004/02/skos/core#>
+PREFIX org: <http://www.w3.org/ns/org#>
+PREFIX mu: <http://mu.semte.ch/vocabularies/core/>
+PREFIX xsd: <http://www.w3.org/2001/XMLSchema#>
+PREFIX dct: <http://purl.org/dc/terms/>
+PREFIX skos: <http://www.w3.org/2004/02/skos/core#>
+PREFIX concepts: <http://lblod.data.gift/concepts/>
+PREFIX bestuur: <http://data.lblod.info/id/besturenVanDeEredienst/>
+PREFIX org: <http://www.w3.org/ns/org#>
+PREFIX rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#>
+PREFIX contacthub: <http://data.lblod.info/vocabularies/contacthub/>
+PREFIX xsd: <http://www.w3.org/2001/XMLSchema#>
+PREFIX ce:  <http://data.lblod.info/id/veranderingsgebeurtenissen/>
+PREFIX cer:  <http://data.lblod.info/id/veranderingsgebeurtenis-resultaten/>
+PREFIX m8g: <http://data.europa.eu/m8g/>
+PREFIX besluit: <http://data.vlaanderen.be/ns/besluit#>
+PREFIX eli: <http://data.europa.eu/eli/ontology#>
+PREFIX foaf: <http://xmlns.com/foaf/0.1/>
+
+#code is a weird prefix but that's how it's called in the domain.json file so I reused it
+PREFIX code: <http://lblod.data.gift/vocabularies/organisatie/>
+
+
+
+# Extende CE for ZWALM: merger of many kerkraden
+
+<http://data.lblod.info/id/veranderingsgebeurtenissen/3940cca35440a8b51d1435fedd5b05fa>
+  rdf:type  org:ChangeEvent ;
+  contacthub:typeWijziging  concepts:d7bbc0ea17fccf7ea35c552d757c905f ; # Samenvoeging
+  org:resultingOrganization  bestuur:dc32dbe8d1f85999cd39a5c9893a9c7d ;
+  code:veranderingsgebeurtenisResultaat cer:71879559ac2045499def_DUMMY_CER_1;
+  code:veranderingsgebeurtenisResultaat cer:71879559ac2045499def_DUMMY_CER_2;
+  code:veranderingsgebeurtenisResultaat cer:71879559ac2045499def_DUMMY_CER_3;
+  code:veranderingsgebeurtenisResultaat cer:71879559ac2045499def_DUMMY_CER_4;
+  code:veranderingsgebeurtenisResultaat cer:71879559ac2045499def_DUMMY_CER_5;
+  code:veranderingsgebeurtenisResultaat cer:71879559ac2045499def_DUMMY_CER_6;
+  code:veranderingsgebeurtenisResultaat cer:71879559ac2045499def_DUMMY_CER_7;
+  code:veranderingsgebeurtenisResultaat cer:71879559ac2045499def_DUMMY_CER_8;
+  code:veranderingsgebeurtenisResultaat cer:71879559ac2045499def_DUMMY_CER_9;
+  code:veranderingsgebeurtenisResultaat cer:71879559ac2045499def_DUMMY_CER_10;
+  code:veranderingsgebeurtenisResultaat cer:71879559ac2045499def_DUMMY_CER_11;
+  code:veranderingsgebeurtenisResultaat cer:71879559ac2045499def_DUMMY_CER_12;
+  org:originalOrganization bestuur:dc32dbe8d1f85999cd39a5c9893a9c7d;
+  org:originalOrganization bestuur:6b910ac3244fb94f6ff2574cd5c91df0;
+  org:originalOrganization bestuur:cace83d9d7b40b310b43defd0acb9da5;
+  org:originalOrganization bestuur:3eb0946f3c30eeec932be0cccba15645;
+  org:originalOrganization bestuur:750db3adf47c16061911818dcbefacc2;
+  org:originalOrganization bestuur:3c8596af2a8aa4d11a6dcc0d32993c7a;
+  org:originalOrganization bestuur:57137d40d46aeb342b89ae2d50b127c3;
+  org:originalOrganization bestuur:9a1ca4b0731d15b683d116fef02f0f9e;
+  org:originalOrganization bestuur:10ccaccbbfcd79c5fad7fbd3747221a1;
+  org:originalOrganization bestuur:a6451f9c7503c2b7c56898fe12e97993;
+  org:originalOrganization bestuur:bbd46776125da4bd88e82e879863bbd6;
+  org:originalOrganization bestuur:edca1c6822af59d219d3652bd749f7fb;
+  dct:date  "2019-07-15T00:00:00"^^xsd:dateTime ;
+  m8g:hasFormalFramework <http://lblod.data.info/id/besluiten/f2ec4db3-6154-41b4-a5be-e0bc129e98d7>;
+  dct:description  "Opheffing 11 parochies, allen samengevoegd bij de parochie Alle Heiligen Nederzwalm - MB 15 juli 2019" .
+
+<http://lblod.data.info/id/besluiten/f2ec4db3-6154-41b4-a5be-e0bc129e98d7>
+  a besluit:Besluit;
+  mu:uuid "f2ec4db3-6154-41b4-a5be-e0bc129e98d7";
+  eli:date_publication  "2019-07-14T00:00:00"^^xsd:dateTime;
+  foaf:page "https://www.vlaanderen.be/agentschap-binnenlands-bestuur".
+
+cer:71879559ac2045499def_DUMMY_CER_1
+  a code:VeranderingsgebeurtenisResultaat;
+  mu:uuid "71879559ac2045499def_DUMMY_CER_1";
+  code:resulterendeStatus <http://lblod.data.gift/concepts/63cc561de9188d64ba5840a42ae8f0d6>; #Actief
+  org:organization  bestuur:dc32dbe8d1f85999cd39a5c9893a9c7d .
+
+cer:71879559ac2045499def_DUMMY_CER_2
+  a code:VeranderingsgebeurtenisResultaat;
+  mu:uuid "71879559ac2045499def_DUMMY_CER_2";
+  code:resulterendeStatus <http://lblod.data.gift/concepts/d02c4e12bf88d2fdf5123b07f29c9311>; #Niet Actief
+  org:organization  bestuur:6b910ac3244fb94f6ff2574cd5c91df0 .
+
+cer:71879559ac2045499def_DUMMY_CER_3
+  a code:VeranderingsgebeurtenisResultaat;
+  mu:uuid "71879559ac2045499def_DUMMY_CER_3";
+  code:resulterendeStatus <http://lblod.data.gift/concepts/d02c4e12bf88d2fdf5123b07f29c9311>; #Niet Actief
+  org:organization  bestuur:cace83d9d7b40b310b43defd0acb9da5 .
+
+cer:71879559ac2045499def_DUMMY_CER_4
+  a code:VeranderingsgebeurtenisResultaat;
+  mu:uuid "71879559ac2045499def_DUMMY_CER_4";
+  code:resulterendeStatus <http://lblod.data.gift/concepts/d02c4e12bf88d2fdf5123b07f29c9311>; #Niet Actief
+  org:organization  bestuur:3eb0946f3c30eeec932be0cccba15645 .
+
+cer:71879559ac2045499def_DUMMY_CER_5
+  a code:VeranderingsgebeurtenisResultaat;
+  mu:uuid "71879559ac2045499def_DUMMY_CER_5";
+  code:resulterendeStatus <http://lblod.data.gift/concepts/d02c4e12bf88d2fdf5123b07f29c9311>; #Niet Actief
+  org:organization  bestuur:750db3adf47c16061911818dcbefacc2 .
+
+cer:71879559ac2045499def_DUMMY_CER_6
+  a code:VeranderingsgebeurtenisResultaat;
+  mu:uuid "71879559ac2045499def_DUMMY_CER_6";
+  code:resulterendeStatus <http://lblod.data.gift/concepts/d02c4e12bf88d2fdf5123b07f29c9311>; #Niet Actief
+  org:organization  bestuur:3c8596af2a8aa4d11a6dcc0d32993c7a .
+
+cer:71879559ac2045499def_DUMMY_CER_7
+  a code:VeranderingsgebeurtenisResultaat;
+  mu:uuid "71879559ac2045499def_DUMMY_CER_7";
+  code:resulterendeStatus <http://lblod.data.gift/concepts/d02c4e12bf88d2fdf5123b07f29c9311>; #Niet Actief
+  org:organization  bestuur:57137d40d46aeb342b89ae2d50b127c3 .
+
+cer:71879559ac2045499def_DUMMY_CER_8
+  a code:VeranderingsgebeurtenisResultaat;
+  mu:uuid "71879559ac2045499def_DUMMY_CER_8";
+  code:resulterendeStatus <http://lblod.data.gift/concepts/d02c4e12bf88d2fdf5123b07f29c9311>; #Niet Actief
+  org:organization  bestuur:9a1ca4b0731d15b683d116fef02f0f9e .
+
+cer:71879559ac2045499def_DUMMY_CER_9
+  a code:VeranderingsgebeurtenisResultaat;
+  mu:uuid "71879559ac2045499def_DUMMY_CER_9";
+  code:resulterendeStatus <http://lblod.data.gift/concepts/d02c4e12bf88d2fdf5123b07f29c9311>; #Niet Actief
+  org:organization  bestuur:10ccaccbbfcd79c5fad7fbd3747221a1 .
+
+cer:71879559ac2045499def_DUMMY_CER_10
+  a code:VeranderingsgebeurtenisResultaat;
+  mu:uuid "71879559ac2045499def_DUMMY_CER_10";
+  code:resulterendeStatus <http://lblod.data.gift/concepts/d02c4e12bf88d2fdf5123b07f29c9311>; #Niet Actief
+  org:organization  bestuur:a6451f9c7503c2b7c56898fe12e97993 .
+
+cer:71879559ac2045499def_DUMMY_CER_11
+  a code:VeranderingsgebeurtenisResultaat;
+  mu:uuid "71879559ac2045499def_DUMMY_CER_11";
+  code:resulterendeStatus <http://lblod.data.gift/concepts/d02c4e12bf88d2fdf5123b07f29c9311>; #Niet Actief
+  org:organization  bestuur:bbd46776125da4bd88e82e879863bbd6 .
+
+cer:71879559ac2045499def_DUMMY_CER_12
+  a code:VeranderingsgebeurtenisResultaat;
+  mu:uuid "71879559ac2045499def_DUMMY_CER_12";
+  code:resulterendeStatus <http://lblod.data.gift/concepts/d02c4e12bf88d2fdf5123b07f29c9311>; #Niet Actief
+  org:organization  bestuur:edca1c6822af59d219d3652bd749f7fb .
+
+
+# Dummy naamsverandering
+<http://data.lblod.info/id/veranderingsgebeurtenissen/3940cca35440_DUMMY_CE_A>
+  rdf:type  org:ChangeEvent ;
+  mu:uuid "3940cca35440_DUMMY_CE_A" ;
+  contacthub:typeWijziging  concepts:6651dc69b0ae8f7ff9974e8a23db1dec ; # Naamswijziging
+  org:resultingOrganization  bestuur:edca1c6822af59d219d3652bd749f7fb ;
+  dct:date  "2010-01-01T00:00:00"^^xsd:dateTime ;
+  dct:description  "Dummy CE de parochie previously known as something else" ;
+  m8g:hasFormalFramework <http://lblod.data.info/id/besluiten/db80b68d-c858-4c75-ae27-92b9125881c4>;
+  code:veranderingsgebeurtenisResultaat cer:71879559ac2045499def_DUMMY_CER_A.
+
+<http://lblod.data.info/id/besluiten/db80b68d-c858-4c75-ae27-92b9125881c4>
+  a besluit:Besluit;
+  mu:uuid "db80b68d-c858-4c75-ae27-92b9125881c4";
+  eli:date_publication  "2010-01-01T00:00:00"^^xsd:dateTime;
+  foaf:page "https://www.vlaanderen.be/agentschap-binnenlands-bestuur".
+
+cer:71879559ac2045499def_DUMMY_CER_A
+  a code:VeranderingsgebeurtenisResultaat;
+  mu:uuid "71879559ac2045499def_DUMMY_CER_A";
+  code:resulterendeStatus <http://lblod.data.gift/concepts/63cc561de9188d64ba5840a42ae8f0d6>; #Actief
+  org:organization  bestuur:edca1c6822af59d219d3652bd749f7fb .
+
+
+#Dummy erkenningen
+<http://data.lblod.info/id/veranderingsgebeurtenissen/3940cca35440_DUMMY_CE_B>
+  rdf:type  org:ChangeEvent ;
+  mu:uuid "3940cca35440_DUMMY_CE_B" ;
+  contacthub:typeWijziging  concepts:3dd7550843eaf18e1fa1ca6c6c3f2610 ; # Erkenning Toegekend
+  org:resultingOrganization  bestuur:edca1c6822af59d219d3652bd749f7fb ;
+  dct:date  "2000-01-01T00:00:00"^^xsd:dateTime ;
+  dct:description  "Dummy CE erkenning toegekend (1)" ;
+  m8g:hasFormalFramework <http://lblod.data.info/id/besluiten/7151e2ca-21f9-42a9-a657-0bbab6aeec7d>;
+  code:veranderingsgebeurtenisResultaat cer:71879559ac2045499def_DUMMY_CER_B.
+
+<http://lblod.data.info/id/besluiten/7151e2ca-21f9-42a9-a657-0bbab6aeec7d>
+  a besluit:Besluit;
+  mu:uuid "7151e2ca-21f9-42a9-a657-0bbab6aeec7d";
+  eli:date_publication "2000-01-01T00:00:00"^^xsd:dateTime;
+  foaf:page "https://www.vlaanderen.be/agentschap-binnenlands-bestuur".
+  
+cer:71879559ac2045499def_DUMMY_CER_B
+  a code:VeranderingsgebeurtenisResultaat;
+  mu:uuid "71879559ac2045499def_DUMMY_CER_B";
+  code:resulterendeStatus <http://lblod.data.gift/concepts/63cc561de9188d64ba5840a42ae8f0d6>; #Actief
+  org:organization  bestuur:edca1c6822af59d219d3652bd749f7fb .
+
+
+<http://data.lblod.info/id/veranderingsgebeurtenissen/3940cca35440_DUMMY_CE_C>
+  rdf:type  org:ChangeEvent ;
+  mu:uuid "3940cca35440_DUMMY_CE_C" ;
+  contacthub:typeWijziging  concepts:3dd7550843eaf18e1fa1ca6c6c3f2610 ; # Erkenning Toegekend
+  org:resultingOrganization  bestuur:bbd46776125da4bd88e82e879863bbd6 ;
+  dct:date  "2001-01-01T00:00:00"^^xsd:dateTime ;
+  dct:description  "Dummy CE erkenning toegekend  (2)";
+  m8g:hasFormalFramework <http://lblod.data.info/id/besluiten/3e9b2e03-2888-4397-a2df-bc5a240accc1>;
+  code:veranderingsgebeurtenisResultaat cer:71879559ac2045499def_DUMMY_CER_C.
+
+<http://lblod.data.info/id/besluiten/3e9b2e03-2888-4397-a2df-bc5a240accc1>
+  a besluit:Besluit;
+  mu:uuid "3e9b2e03-2888-4397-a2df-bc5a240accc1";
+  eli:date_publication "2001-01-01T00:00:00"^^xsd:dateTime;
+  foaf:page "https://www.vlaanderen.be/agentschap-binnenlands-bestuur".
+
+cer:71879559ac2045499def_DUMMY_CER_C
+  a code:VeranderingsgebeurtenisResultaat;
+  mu:uuid "71879559ac2045499def_DUMMY_CER_C";
+  code:resulterendeStatus <http://lblod.data.gift/concepts/63cc561de9188d64ba5840a42ae8f0d6>; #Actief
+  org:organization  bestuur:bbd46776125da4bd88e82e879863bbd6 .
+
+
+<http://data.lblod.info/id/veranderingsgebeurtenissen/3940cca35440_DUMMY_CE_D>
+  rdf:type  org:ChangeEvent ;
+  mu:uuid "3940cca35440_DUMMY_CE_D" ;
+  contacthub:typeWijziging  concepts:3dd7550843eaf18e1fa1ca6c6c3f2610 ; # Erkenning Toegekend
+  org:resultingOrganization  bestuur:dc32dbe8d1f85999cd39a5c9893a9c7d ;
+  dct:date  "2002-01-01T00:00:00"^^xsd:dateTime ;
+  dct:description  "Dummy CE erkenning toegekend  (3)";
+  m8g:hasFormalFramework <http://lblod.data.info/id/besluiten/e09c3d9e-9230-4a13-9ba7-83cf1a055a05>;
+  code:veranderingsgebeurtenisResultaat cer:71879559ac2045499def_DUMMY_CER_D.
+
+<http://lblod.data.info/id/besluiten/e09c3d9e-9230-4a13-9ba7-83cf1a055a05>
+  a besluit:Besluit;
+  mu:uuid "e09c3d9e-9230-4a13-9ba7-83cf1a055a05";
+  eli:date_publication  "2002-01-01T00:00:00"^^xsd:dateTime;
+  foaf:page "https://www.vlaanderen.be/agentschap-binnenlands-bestuur".
+
+cer:71879559ac2045499def_DUMMY_CER_D
+  a code:VeranderingsgebeurtenisResultaat;
+  mu:uuid "71879559ac2045499def_DUMMY_CER_D";
+  code:resulterendeStatus <http://lblod.data.gift/concepts/63cc561de9188d64ba5840a42ae8f0d6>; #Actief
+  org:organization  bestuur:dc32dbe8d1f85999cd39a5c9893a9c7d .
--- a/config/dispatcher/dispatcher.ex
+++ b/config/dispatcher/dispatcher.ex
@@ -5,14 +5,17 @@ defmodule Dispatcher do
    html: ["text/html", "application/xhtml+html"],
    json: ["application/json", "application/vnd.api+json"],
    upload: ["multipart/form-data"],
+    sparql_json: ["application/sparql-results+json"],
    any: [ "*/*" ],
  ]

  define_layers [ :api_services, :api, :frontend, :not_found ]

+
  ###############################################################
  # domain.json
  ###############################################################
+
  match "/people/*path", %{ accept: [:json], layer: :api} do
    Proxy.forward conn, path, "http://cache/people/"
  end
@@ -72,7 +75,7 @@ defmodule Dispatcher do
  match "/worship-administrative-units/*path", %{ accept: [:json], layer: :api} do
    Proxy.forward conn, path, "http://cache/worship-administrative-units/"
  end
-  
+
  match "/worship-services/*path", %{ accept: [:json], layer: :api} do
    Proxy.forward conn, path, "http://cache/worship-services/"
  end
@@ -123,11 +126,15 @@ defmodule Dispatcher do

  match "/change-event-types/*path", %{ accept: [:json], layer: :api} do
    Proxy.forward conn, path, "http://cache/change-event-types/"
-  end 
+  end
+
+  match "/change-event-results/*path", %{ accept: [:json], layer: :api} do
+    Proxy.forward conn, path, "http://cache/change-event-results/"
+  end

  match "/organization-status-codes/*path", %{ accept: [:json], layer: :api} do
    Proxy.forward conn, path, "http://cache/organization-status-codes/"
-  end   
+  end

  match "/locations/*path", %{ accept: [:json], layer: :api} do
    Proxy.forward conn, path, "http://cache/locations/"
@@ -139,19 +146,15 @@ defmodule Dispatcher do

  match "/ministers/*path", %{ accept: [:json], layer: :api} do
    Proxy.forward conn, path, "http://cache/ministers/"
-  end 
+  end

  match "/minister-conditions/*path", %{ accept: [:json], layer: :api} do
    Proxy.forward conn, path, "http://cache/minister-conditions/"
-  end 
-
-  match "/associated-legal-structures/*path", %{ accept: [:json], layer: :api} do
-    Proxy.forward conn, path, "http://cache/associated-legal-structures/"
-  end 
+  end

  match "/dates-of-birth/*path", %{ accept: [:json], layer: :api} do
    Proxy.forward conn, path, "http://cache/dates-of-birth/"
-  end   
+  end

  match "/nationalities/*path", %{ accept: [:json], layer: :api} do
    Proxy.forward conn, path, "http://cache/nationalities/"
@@ -160,6 +163,9 @@ defmodule Dispatcher do
  match "/gender-codes/*path", %{ accept: [:json], layer: :api} do
    Proxy.forward conn, path, "http://cache/gender-codes/"
  end
+  match "/concepts/*path", %{ accept: [:json], layer: :api} do
+    Proxy.forward conn, path, "http://cache/concepts/"
+  end

  match "/minister-positions/*path", %{ accept: [:json], layer: :api} do
    Proxy.forward conn, path, "http://cache/minister-positions/"
@@ -177,25 +183,33 @@ defmodule Dispatcher do
    Proxy.forward conn, path, "http://cache/minister-condition-criterions/"
  end

-  match "/legal-form-types/*path", %{ accept: [:json], layer: :api} do
-    Proxy.forward conn, path, "http://cache/legal-form-types/"
-  end
-
  match "/document-types-criterions/*path", %{ accept: [:json], layer: :api} do
    Proxy.forward conn, path, "http://cache/document-types-criterions/"
-  end  
+  end

  match "/site-types/*path", %{ accept: [:json], layer: :api} do
    Proxy.forward conn, path, "http://cache/site-types/"
  end
-  
+
+  match "/request-reasons/*path", %{ accept: [:json], layer: :api} do
+    Proxy.forward conn, path, "http://cache/request-reasons/"
+  end
+
+  match "/decisions/*path", %{ accept: [:json], layer: :api} do
+    Proxy.forward conn, path, "http://cache/decisions/"
+  end
+
+
  ###############
  # LOGIN
  ###############
-  match "/accounts/*path", %{ accept: [:json], layer: :api} do
-    Proxy.forward conn, path, "http://resource/accounts/"
+
+  match "/accounts", %{ accept: [:json], layer: :api} do
+   Proxy.forward conn, [], "http://resource/accounts/"
+  end
+  match "/accounts/*path", %{ accept: [:json], layer: :api} do
+    Proxy.forward conn, path, "http://accountdetail/accounts/"
  end
-  
  match "/groups/*path", %{ accept: [:json], layer: :api} do
    Proxy.forward conn, path, "http://resource/groups/"
  end
@@ -207,22 +221,16 @@ defmodule Dispatcher do
  match "/sessions/*path", %{ accept: [:any], layer: :api} do
    Proxy.forward conn, path, "http://login/sessions/"
  end
-  
+
+
  ###############
  # API SERVICES
  ###############
+
  match "/v3/api-docs/*path", %{ layer: :api_services, accept: %{ json: true } } do
    forward conn, path, "http://kalliope-api/v3/api-docs/"
  end

-  match "/delta/*path", %{ layer: :api_services, accept: %{ json: true } } do
-    forward conn, path, "http://kalliope-api/delta/"
-  end
-
-  match "/bulk/*path", %{ layer: :api_services, accept: %{ json: true } } do
-    forward conn, path, "http://kalliope-api/bulk"
-  end
-
  match "/changes/*path", %{ layer: :api_services, accept: %{ json: true } } do
    forward conn, path, "http://kalliope-api/changes/"
  end
@@ -243,12 +251,58 @@ defmodule Dispatcher do
    forward conn, path, "http://privacy/person-information-requests"
  end

+  get "/uri-info/*path", %{ layer: :api_services, accept: %{ json: true } } do
+    forward conn, path, "http://uri-info/"
+  end
+
+
+  #################################################################
+  # FILES
+  #################################################################
+
+  get "/files/:id/download", %{ accept: [:any], } do
+    Proxy.forward conn, [], "http://file/files/" <> id <> "/download"
+  end
+
+  get "/files/*path" , %{ layer: :api_services, accept: %{ json: true } } do
+    Proxy.forward conn, path, "http://cache/files/"
+  end
+
+  #################################################################
+  # DCAT
+  #################################################################
+
+  get "/datasets/*path", %{ layer: :api_services, accept: %{ json: true } } do
+    Proxy.forward conn, path, "http://cache/datasets/"
+  end
+
+  get "/distributions/*path", %{ layer: :api_services, accept: %{ json: true } } do
+    Proxy.forward conn, path, "http://cache/distributions/"
+  end
+
+
+  #################################################################
+  #  DELTA: administrative-units
+  #################################################################
+
+  get "/sync/administrative-units/files/*path" do
+    Proxy.forward conn, path, "http://delta-producer-json-diff-file-publisher-administrative-units/files/"
+  end
+
+  #################################################################
+  #  DELTA: organizations
+  #################################################################
+
+  get "/sync/organizations/files/*path" do
+    Proxy.forward conn, path, "http://delta-producer-json-diff-file-publisher-organizations/files/"
+  end

  ###############################################################
  # frontend layer
  ###############################################################
-  match "/torii/redirect.html", %{ accept: [:html], layer: :api } do
-    Proxy.forward conn, [], "http://frontend/torii/redirect.html"
+
+  match "/authorization/callback/*_path", %{ accept: [:html], layer: :api } do
+      Proxy.forward conn, [], "http://frontend/torii/redirect.html"
  end

  match "/assets/*path", %{ layer: :api } do
@@ -266,10 +320,19 @@ defmodule Dispatcher do
  match "/*_path", %{ layer: :frontend } do
    Proxy.forward conn, [], "http://frontend/index.html"
  end
-  
+
+  ###############################################################
+  # sparql endpoint
+  ###############################################################
+
+  post "/sparql/*path", %{ layer: :api_services, accept: %{ sparql_json: true } } do
+    forward conn, path, "http://db:8890/sparql/"
+  end
+
  ###############################################################
  # errors
  ###############################################################
+
  match "/*_path", %{ accept: [:any], layer: :not_found} do
    send_resp( conn, 404, "{\"error\": {\"code\": 404}")
  end
--- a/config/frontend/add-x-frame-options-header.conf
+++ b/config/frontend/add-x-frame-options-header.conf
@@ -0,0 +1,3 @@
+location / {
+  add_header X-Frame-Options "DENY" always;
+}
--- a/config/jobs-controller/config.json
+++ b/config/jobs-controller/config.json
@@ -0,0 +1,66 @@
+{
+  "http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/initialPublicationGraphSyncing/administrative-units": {
+    "tasksConfiguration": [
+      {
+        "currentOperation": null,
+        "nextOperation": "http://redpencil.data.gift/id/jobs/concept/TaskOperation/deltas/initialPublicationGraphSyncing",
+        "nextIndex": "0"
+      },
+      {
+        "currentOperation": "http://redpencil.data.gift/id/jobs/concept/TaskOperation/deltas/initialPublicationGraphSyncing",
+        "nextOperation": "http://redpencil.data.gift/id/jobs/concept/TaskOperation/deltas/deltaDumpFileCreation",
+        "nextIndex": "1"
+      }
+    ]
+  },
+  "http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/healingOperation/administrative-units": {
+    "tasksConfiguration": [
+      {
+        "currentOperation": null,
+        "nextOperation": "http://redpencil.data.gift/id/jobs/concept/TaskOperation/deltas/healing/patchPublicationGraph",
+        "nextIndex": "0"
+      }
+    ]
+  },
+  "http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/deltaDumpFileCreation/administrative-units": {
+    "tasksConfiguration": [
+      {
+        "currentOperation": null,
+        "nextOperation": "http://redpencil.data.gift/id/jobs/concept/TaskOperation/deltas/deltaDumpFileCreation",
+        "nextIndex": "0"
+      }
+    ]
+  },
+  "http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/initialPublicationGraphSyncing/organizations": {
+    "tasksConfiguration": [
+      {
+        "currentOperation": null,
+        "nextOperation": "http://redpencil.data.gift/id/jobs/concept/TaskOperation/deltas/initialPublicationGraphSyncing",
+        "nextIndex": "0"
+      },
+      {
+        "currentOperation": "http://redpencil.data.gift/id/jobs/concept/TaskOperation/deltas/initialPublicationGraphSyncing",
+        "nextOperation": "http://redpencil.data.gift/id/jobs/concept/TaskOperation/deltas/deltaDumpFileCreation",
+        "nextIndex": "1"
+      }
+    ]
+  },
+  "http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/healingOperation/organizations": {
+    "tasksConfiguration": [
+      {
+        "currentOperation": null,
+        "nextOperation": "http://redpencil.data.gift/id/jobs/concept/TaskOperation/deltas/healing/patchPublicationGraph",
+        "nextIndex": "0"
+      }
+    ]
+  },
+  "http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/deltaDumpFileCreation/organizations": {
+    "tasksConfiguration": [
+      {
+        "currentOperation": null,
+        "nextOperation": "http://redpencil.data.gift/id/jobs/concept/TaskOperation/deltas/deltaDumpFileCreation",
+        "nextIndex": "0"
+      }
+    ]
+  }
+}
--- a/config/kalliope/bulk/.gitkeep
+++ b/config/kalliope/bulk/.gitkeep
--- a/config/kalliope/security-dev.yml
+++ b/config/kalliope/security-dev.yml
@@ -0,0 +1,9 @@
+# disabled on dev
+application:
+  security:
+    enabled: false
+spring:
+  autoconfigure:
+    exclude:
+       - org.springframework.boot.autoconfigure.security.servlet.SecurityAutoConfiguration
+       - org.springframework.boot.actuate.autoconfigure.security.servlet.ManagementWebSecurityAutoConfiguration
--- a/config/migrations/20210701120000-meta.ttl
+++ b/config/migrations/20210701120000-meta.ttl
--- a/config/migrations/20211119151700-move-reason-codes.sparql
+++ b/config/migrations/20211119151700-move-reason-codes.sparql
@@ -0,0 +1,14 @@
+DELETE {
+  GRAPH  <http://mu.semte.ch/application> {
+    ?s ?p ?o
+  }
+} INSERT {
+  GRAPH  <http://mu.semte.ch/graphs/contacthub/141d9d6b-54af-4d17-b313-8d1c30bc3f5b/ChAdmin> {
+    ?s ?p ?o
+  }
+} WHERE {
+  GRAPH  <http://mu.semte.ch/application> {
+    ?s a <http://mu.semte.ch/vocabularies/ext/ReasonCode>;
+    ?p ?o.
+  }
+}
--- a/config/migrations/20210815112611122233-create-mock-group.sparql
+++ b/config/migrations/20210815112611122233-create-mock-group.sparql
--- a/config/migrations/202108151011002223444444-create-mock-user.sparql
+++ b/config/migrations/202108151011002223444444-create-mock-user.sparql
--- a/config/migrations/202109241151111112111233322-auth.sparql
+++ b/config/migrations/202109241151111112111233322-auth.sparql
--- a/config/migrations/20211120150000-remove-acmidm-account-from-public.sparql
+++ b/config/migrations/20211120150000-remove-acmidm-account-from-public.sparql
@@ -0,0 +1,32 @@
+PREFIX mu: <http://mu.semte.ch/vocabularies/core/>
+PREFIX skos: <http://www.w3.org/2004/02/skos/core#>
+PREFIX dcterms: <http://purl.org/dc/terms/>
+PREFIX besluit: <http://data.vlaanderen.be/ns/besluit#>
+PREFIX foaf: <http://xmlns.com/foaf/0.1/>
+PREFIX ext:<http://mu.semte.ch/vocabularies/ext/>
+  DELETE {
+    GRAPH  <http://mu.semte.ch/graphs/public> {
+      ?s ?p ?o
+    }
+  } INSERT {
+    GRAPH  <http://mu.semte.ch/graphs/public> {
+       <http://data.lblod.info/id/bestuurseenheden/141d9d6b-54af-4d17-b313-8d1c30bc3f5b> a besluit:Bestuurseenheid ;
+          mu:uuid "141d9d6b-54af-4d17-b313-8d1c30bc3f5b" ;
+          skos:prefLabel "Agentschap Binnenlands Bestuur" ;
+          dcterms:identifier "OVO001835" .
+      <http://data.lblod.info/id/persoon/d39fe09e-d339-4e43-8680-dbbcfb3d3470> a foaf:Person ;
+          mu:uuid "d39fe09e-d339-4e43-8680-dbbcfb3d3470" ;
+          foaf:firstName "Josephine" ;
+          foaf:familyName "Putseys" ;
+          foaf:member <http://data.lblod.info/id/bestuurseenheden/141d9d6b-54af-4d17-b313-8d1c30bc3f5b> ;
+          foaf:account <http://data.lblod.info/id/account/3a91ff60-07c1-4136-ac5e-55cf401e0956> .
+      <http://data.lblod.info/id/account/3a91ff60-07c1-4136-ac5e-55cf401e0956> a foaf:OnlineAccount ;
+          mu:uuid "3a91ff60-07c1-4136-ac5e-55cf401e0956" ;
+          foaf:accountServiceHomepage <https://github.com/lblod/mock-login-service>;
+          ext:sessionRole "ChAdmin".
+    }
+  } WHERE {
+    GRAPH  <http://mu.semte.ch/graphs/public> {
+      ?s ?p ?o
+    }
+  }
--- a/config/migrations/20211120160000-source-crab.sparql
+++ b/config/migrations/20211120160000-source-crab.sparql
@@ -0,0 +1,13 @@
+INSERT DATA {
+  GRAPH <http://mu.semte.ch/graphs/contacthub/141d9d6b-54af-4d17-b313-8d1c30bc3f5b/ChAdmin> {
+    <http://lblod.data.gift/concept-schemes/6f6f95d3-94e1-48a7-99ec-cdff57e6752d> a <http://www.w3.org/2004/02/skos/core#ConceptScheme>;    
+    <http://www.w3.org/2004/02/skos/core#prefLabel> "Data sources"@en, "Databronnen"@nl .
+    <http://lblod.data.gift/concepts/e59c97a9-4e95-4d65-9696-756de47fbc1f>  a <http://www.w3.org/2004/02/skos/core#Concept>;  
+    <http://www.w3.org/2004/02/skos/core#inScheme> <http://lblod.data.gift/concept-schemes/6f6f95d3-94e1-48a7-99ec-cdff57e6752d>;  
+    <http://www.w3.org/2004/02/skos/core#topConceptOf><http://lblod.data.gift/concept-schemes/6f6f95d3-94e1-48a7-99ec-cdff57e6752d>;  
+    <http://mu.semte.ch/vocabularies/core/uuid> "e59c97a9-4e95-4d65-9696-756de47fbc1f";  
+    <http://www.w3.org/2004/02/skos/core#prefLabel> "Centraal Referentieadressenbestand (CRAB)";  
+    <http://www.w3.org/2004/02/skos/core#altLabel> "CRAB".
+  }
+}
+
--- a/config/migrations/20211123120000-private-data.sparql
+++ b/config/migrations/20211123120000-private-data.sparql
@@ -0,0 +1,53 @@
+ PREFIX  ext:  <http://mu.semte.ch/vocabularies/ext/>
+ PREFIX  xsd:  <http://www.w3.org/2001/XMLSchema#>
+ PREFIX  mu:   <http://mu.semte.ch/vocabularies/core/>
+ PREFIX  generiek: <https://data.vlaanderen.be/ns/generiek#>
+ PREFIX  persoon: <https://data.vlaanderen.be/ns/persoon#>
+ PREFIX  person: <http://www.w3.org/ns/person#>
+ 
+ DELETE {
+   GRAPH <http://mu.semte.ch/graphs/contacthub/141d9d6b-54af-4d17-b313-8d1c30bc3f5b/ChAdmin> {
+     ?s persoon:heeftGeboorte ?heeftGeboorte .
+     ?s persoon:registratie ?registration .
+     ?registration generiek:gestructureerdeIdentificator ?identificator .
+     ?identificator ?x ?y .
+     ?registration ?t ?j .
+     ?s persoon:geslacht ?geslacht .
+     ?s persoon:heeftNationaliteit ?nationaliteit .
+   }
+ }
+ INSERT {
+   GRAPH <http://mu.semte.ch/graphs/privacy-centric-graph> {
+     ?s persoon:heeftGeboorte ?heeftGeboorte .
+     ?s persoon:registratie ?registration .
+     ?registration generiek:gestructureerdeIdentificator ?identificator .
+     ?identificator ?x ?y .
+     ?registration ?t ?j .
+     ?s persoon:geslacht ?geslacht .
+     ?s persoon:heeftNationaliteit ?nationaliteit .
+   }
+ }
+ WHERE
+   { GRAPH <http://mu.semte.ch/graphs/contacthub/141d9d6b-54af-4d17-b313-8d1c30bc3f5b/ChAdmin>
+       { 
+         ?s a person:Person.
+         OPTIONAL
+           { ?s        persoon:heeftGeboorte  ?heeftGeboorte .
+             ?heeftGeboorte
+                       ?p                    ?o
+           }
+         OPTIONAL
+           { ?s        persoon:registratie   ?registration .
+             ?registration
+                       generiek:gestructureerdeIdentificator  ?identificator .
+             ?identificator
+                       ?x                    ?y .
+             ?registration
+                       ?t                    ?j
+           }
+         OPTIONAL
+           { ?s  persoon:geslacht  ?geslacht }
+         OPTIONAL
+           { ?s  persoon:heeftNationaliteit  ?nationaliteit }
+       }
+   }
--- a/config/migrations/20211203120000-bestuur-admidm.sparql
+++ b/config/migrations/20211203120000-bestuur-admidm.sparql
@@ -0,0 +1,13 @@
+PREFIX mu: <http://mu.semte.ch/vocabularies/core/>
+PREFIX skos: <http://www.w3.org/2004/02/skos/core#>
+PREFIX dcterms: <http://purl.org/dc/terms/>
+PREFIX besluit: <http://data.vlaanderen.be/ns/besluit#>
+
+INSERT DATA {
+  GRAPH <http://mu.semte.ch/graphs/contacthub/accounts> {
+    <http://data.lblod.info/id/bestuurseenheden/141d9d6b-54af-4d17-b313-8d1c30bc3f5b> a besluit:Bestuurseenheid ;
+       mu:uuid "141d9d6b-54af-4d17-b313-8d1c30bc3f5b" ;
+       skos:prefLabel "Agentschap Binnenlands Bestuur" ;
+       dcterms:identifier "OVO001835" .
+  }
+}
--- a/config/migrations/20211203130000-clear-mock-data.sparql
+++ b/config/migrations/20211203130000-clear-mock-data.sparql
@@ -0,0 +1,3 @@
+
+CLEAR GRAPH  <http://mu.semte.ch/graphs/public> ;
+CLEAR GRAPH <http://mu.semte.ch/graphs/organizations/141d9d6b-54af-4d17-b313-8d1c30bc3f5b>;
--- a/config/migrations/20211206120000-mock-user-roles.sparql
+++ b/config/migrations/20211206120000-mock-user-roles.sparql
@@ -0,0 +1,83 @@
+PREFIX mu: <http://mu.semte.ch/vocabularies/core/>
+PREFIX skos: <http://www.w3.org/2004/02/skos/core#>
+PREFIX dcterms: <http://purl.org/dc/terms/>
+PREFIX besluit: <http://data.vlaanderen.be/ns/besluit#>
+PREFIX foaf: <http://xmlns.com/foaf/0.1/>
+PREFIX ext:<http://mu.semte.ch/vocabularies/ext/>
+ INSERT DATA {
+    GRAPH  <http://mu.semte.ch/graphs/public> {
+       <http://data.lblod.info/id/bestuurseenheden/141d9d6b-54af-4d17-b313-8d1c30bc3f5b> a besluit:Bestuurseenheid ;
+          mu:uuid "141d9d6b-54af-4d17-b313-8d1c30bc3f5b" ;
+          skos:prefLabel "Agentschap Binnenlands Bestuur" ;
+          dcterms:identifier "OVO001835" .
+
+      <http://data.lblod.info/id/persoon/d39fe09e-d339-4e43-8680-dbbcfb3d3470> a foaf:Person ;
+          mu:uuid "d39fe09e-d339-4e43-8680-dbbcfb3d3470" ;
+          foaf:firstName "Josephine" ;
+          foaf:familyName "Lezer" ;
+          foaf:member <http://data.lblod.info/id/bestuurseenheden/141d9d6b-54af-4d17-b313-8d1c30bc3f5b> ;
+          foaf:account <http://data.lblod.info/id/account/3a91ff60-07c1-4136-ac5e-55cf401e0989> .
+      <http://data.lblod.info/id/account/3a91ff60-07c1-4136-ac5e-55cf401e0989> a foaf:OnlineAccount ;
+          mu:uuid "3a91ff60-07c1-4136-ac5e-55cf401e0989" ;
+          foaf:accountServiceHomepage <https://github.com/lblod/mock-login-service>;
+          ext:sessionRole "ABBOrganisatiePortaalGebruiker-lezer".
+
+      <http://data.lblod.info/id/persoon/d39fe09e-d339-4e43-8680-dbbcfb3d3471> a foaf:Person ;
+          mu:uuid "d39fe09e-d339-4e43-8680-dbbcfb3d3471" ;
+          foaf:firstName "Josephine" ;
+          foaf:familyName "Editeerder" ;
+          foaf:member <http://data.lblod.info/id/bestuurseenheden/141d9d6b-54af-4d17-b313-8d1c30bc3f5b> ;
+          foaf:account <http://data.lblod.info/id/account/3a91ff60-07c1-4136-ac5e-55cf401e0957> .
+      <http://data.lblod.info/id/account/3a91ff60-07c1-4136-ac5e-55cf401e0957> a foaf:OnlineAccount ;
+          mu:uuid "3a91ff60-07c1-4136-ac5e-55cf401e0957" ;
+          foaf:accountServiceHomepage <https://github.com/lblod/mock-login-service>;
+          ext:sessionRole "ABBOrganisatiePortaalGebruiker-editeerder".
+          
+      <http://data.lblod.info/id/persoon/d39fe09e-d339-4e43-8680-dbbcfb3d3472> a foaf:Person ;
+          mu:uuid "d39fe09e-d339-4e43-8680-dbbcfb3d3472" ;
+          foaf:firstName "Josephine" ;
+          foaf:familyName "Beheerder" ;
+          foaf:member <http://data.lblod.info/id/bestuurseenheden/141d9d6b-54af-4d17-b313-8d1c30bc3f5b> ;
+          foaf:account <http://data.lblod.info/id/account/3a91ff60-07c1-4136-ac5e-55cf401e0958> .
+      <http://data.lblod.info/id/account/3a91ff60-07c1-4136-ac5e-55cf401e0958> a foaf:OnlineAccount ;
+          mu:uuid "3a91ff60-07c1-4136-ac5e-55cf401e0958" ;
+          foaf:accountServiceHomepage <https://github.com/lblod/mock-login-service>;
+          ext:sessionRole "ABBOrganisatiePortaalGebruiker-beheerder".
+    }
+
+    GRAPH <http://mu.semte.ch/graphs/organizations/141d9d6b-54af-4d17-b313-8d1c30bc3f5b> {
+      
+      <http://data.lblod.info/id/persoon/d39fe09e-d339-4e43-8680-dbbcfb3d3470> a foaf:Person ;
+          mu:uuid "d39fe09e-d339-4e43-8680-dbbcfb3d3470" ;
+          foaf:firstName "Josephine" ;
+          foaf:familyName "Lezer" ;
+          foaf:member <http://data.lblod.info/id/bestuurseenheden/141d9d6b-54af-4d17-b313-8d1c30bc3f5b> ;
+          foaf:account <http://data.lblod.info/id/account/3a91ff60-07c1-4136-ac5e-55cf401e0989> .
+      <http://data.lblod.info/id/account/3a91ff60-07c1-4136-ac5e-55cf401e0989> a foaf:OnlineAccount ;
+          mu:uuid "3a91ff60-07c1-4136-ac5e-55cf401e0989" ;
+          foaf:accountServiceHomepage <https://github.com/lblod/mock-login-service>;
+          ext:sessionRole "ABBOrganisatiePortaalGebruiker-lezer".
+
+      <http://data.lblod.info/id/persoon/d39fe09e-d339-4e43-8680-dbbcfb3d3471> a foaf:Person ;
+          mu:uuid "d39fe09e-d339-4e43-8680-dbbcfb3d3471" ;
+          foaf:firstName "Josephine" ;
+          foaf:familyName "Editeerder" ;
+          foaf:member <http://data.lblod.info/id/bestuurseenheden/141d9d6b-54af-4d17-b313-8d1c30bc3f5b> ;
+          foaf:account <http://data.lblod.info/id/account/3a91ff60-07c1-4136-ac5e-55cf401e0957> .
+      <http://data.lblod.info/id/account/3a91ff60-07c1-4136-ac5e-55cf401e0957> a foaf:OnlineAccount ;
+          mu:uuid "3a91ff60-07c1-4136-ac5e-55cf401e0957" ;
+          foaf:accountServiceHomepage <https://github.com/lblod/mock-login-service>;
+          ext:sessionRole "ABBOrganisatiePortaalGebruiker-editeerder".
+          
+      <http://data.lblod.info/id/persoon/d39fe09e-d339-4e43-8680-dbbcfb3d3472> a foaf:Person ;
+          mu:uuid "d39fe09e-d339-4e43-8680-dbbcfb3d3472" ;
+          foaf:firstName "Josephine" ;
+          foaf:familyName "Beheerder" ;
+          foaf:member <http://data.lblod.info/id/bestuurseenheden/141d9d6b-54af-4d17-b313-8d1c30bc3f5b> ;
+          foaf:account <http://data.lblod.info/id/account/3a91ff60-07c1-4136-ac5e-55cf401e0958> .
+      <http://data.lblod.info/id/account/3a91ff60-07c1-4136-ac5e-55cf401e0958> a foaf:OnlineAccount ;
+          mu:uuid "3a91ff60-07c1-4136-ac5e-55cf401e0958" ;
+          foaf:accountServiceHomepage <https://github.com/lblod/mock-login-service>;
+          ext:sessionRole "ABBOrganisatiePortaalGebruiker-beheerder".
+    }
+  } 
--- a/config/migrations/20211206130000-move-graph.sparql
+++ b/config/migrations/20211206130000-move-graph.sparql
@@ -0,0 +1,8 @@
+PREFIX mu: <http://mu.semte.ch/vocabularies/core/>
+PREFIX skos: <http://www.w3.org/2004/02/skos/core#>
+PREFIX dcterms: <http://purl.org/dc/terms/>
+PREFIX besluit: <http://data.vlaanderen.be/ns/besluit#>
+PREFIX foaf: <http://xmlns.com/foaf/0.1/>
+PREFIX ext:<http://mu.semte.ch/vocabularies/ext/>
+MOVE <http://mu.semte.ch/graphs/contacthub/141d9d6b-54af-4d17-b313-8d1c30bc3f5b/ChAdmin> TO 
+<http://mu.semte.ch/graphs/organisatieportaal>
--- a/config/migrations/2022/20220125185900-rename-change-event-result-relationship-predicate.sparql
+++ b/config/migrations/2022/20220125185900-rename-change-event-result-relationship-predicate.sparql
@@ -0,0 +1,18 @@
+PREFIX ext: <http://mu.semte.ch/vocabularies/ext/>
+PREFIX rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#>
+PREFIX org: <http://www.w3.org/ns/org#>
+
+DELETE {
+    GRAPH ?g {
+      ?changeEventResult org:organization ?organization .
+    }
+} INSERT {
+    GRAPH ?g {
+      ?changeEventResult ext:resultingOrganization ?organization .
+    }
+} WHERE {
+  GRAPH ?g {
+    ?changeEventResult a <http://lblod.data.gift/vocabularies/organisatie/VeranderingsgebeurtenisResultaat> ;
+            org:organization ?organization .
+  }
+}
--- a/config/migrations/2022/20220202120000-primary-contacts.sparql
+++ b/config/migrations/2022/20220202120000-primary-contacts.sparql
@@ -0,0 +1,22 @@
+# cf 20220110100000-secondary-contacts.sparql for context.
+# In case it's not a secondary contactpoint (a contactpoint without an address if multiple contact points exist for one entity/mandataris)
+PREFIX locn: <http://www.w3.org/ns/locn#>
+PREFIX schema: <http://schema.org/>
+PREFIX rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#>
+PREFIX rdfs: <http://www.w3.org/2000/01/rdf-schema#>
+INSERT {
+  GRAPH <http://mu.semte.ch/graphs/organisatieportaal> {
+    ?contactPoint
+      schema:contactType "Primary"
+  }
+}
+WHERE {
+  GRAPH <http://mu.semte.ch/graphs/organisatieportaal> {
+    ?contactPoint 
+      a schema:ContactPoint.
+    FILTER NOT EXISTS {
+      ?contactPoint
+        schema:contactType "Secondary"
+    }
+  }
+}
--- a/config/migrations/2022/20220203100000-secondary-contacts.sparql
+++ b/config/migrations/2022/20220203100000-secondary-contacts.sparql
@@ -0,0 +1,24 @@
+PREFIX locn: <http://www.w3.org/ns/locn#>
+PREFIX schema: <http://schema.org/>
+PREFIX rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#>
+PREFIX rdfs: <http://www.w3.org/2000/01/rdf-schema#>
+INSERT {
+  GRAPH <http://mu.semte.ch/graphs/organisatieportaal> {
+    ?secondary
+      schema:contactType "Secondary"
+  }
+}
+WHERE  {
+  GRAPH <http://mu.semte.ch/graphs/organisatieportaal> {
+    ?primary 
+      a schema:ContactPoint;
+      locn:address ?a1;
+      schema:telephone ?t1.
+    ?mandataris schema:contactPoint ?primary, ?secondary.
+    ?secondary
+      schema:telephone ?t2.
+    FILTER NOT EXISTS {
+     ?secondary locn:address ?a2.
+    }
+  }
+}    
--- a/config/migrations/20220110120000-delete-old-change-events.sparql
+++ b/config/migrations/20220110120000-delete-old-change-events.sparql
@@ -0,0 +1,8 @@
+delete { GRAPH ?g {?s ?p ?o} }
+
+where {
+ GRAPH ?g {
+    ?s a ?type; ?p ?o.
+    filter(?type = <http://www.w3.org/ns/org#ChangeEvent> || ?p = <http://www.w3.org/ns/org#resultedFrom>)
+ }
+}
--- a/config/migrations/20220120100418-remove-old-reasons.sparql
+++ b/config/migrations/20220120100418-remove-old-reasons.sparql
@@ -0,0 +1,11 @@
+DELETE {
+  GRAPH  <http://mu.semte.ch/graphs/organisatieportaal> {
+    ?s ?p ?o
+  }
+}
+ WHERE {
+  GRAPH  <http://mu.semte.ch/graphs/organisatieportaal> {
+    ?s a <http://mu.semte.ch/vocabularies/ext/ReasonCode>;
+        ?p ?o.
+  }
+}
--- a/config/migrations/20220120101318-insert-new-reasons.sparql
+++ b/config/migrations/20220120101318-insert-new-reasons.sparql
@@ -0,0 +1,37 @@
+PREFIX skos: <http://www.w3.org/2004/02/skos/core#>
+PREFIX ext: <http://mu.semte.ch/vocabularies/ext/>
+PREFIX mu: <http://mu.semte.ch/vocabularies/core/>
+
+ INSERT DATA {
+  GRAPH  <http://mu.semte.ch/graphs/organisatieportaal> {
+    <http://data.lblod.info/id/information-request-reason/3aeec145-acf3-4b6e-9c00-5b8e285736e0> a ext:ReasonCode,
+        skos:Concept;
+        mu:uuid "3aeec145-acf3-4b6e-9c00-5b8e285736e0";
+        skos:prefLabel "Aanmaken van een persoon".
+
+    <http://data.lblod.info/id/information-request-reason/3beec145-acf3-4b6e-9c00-5b8e285736e1> a ext:ReasonCode,
+        skos:Concept;
+        mu:uuid "3beec145-acf3-4b6e-9c00-5b8e285736e1";
+        skos:prefLabel "In het kader van administratief toezicht".
+
+    <http://data.lblod.info/id/information-request-reason/3beec145-acf3-4b6e-9c00-5b8e285736e2> a ext:ReasonCode,
+        skos:Concept;
+        mu:uuid "3beec145-acf3-4b6e-9c00-5b8e285736e2";
+        skos:prefLabel "In het kader van een screeningsdossier".
+
+    <http://data.lblod.info/id/information-request-reason/3beec145-acf3-4b6e-9c00-5b8e285736e3> a ext:ReasonCode,
+        skos:Concept;
+        mu:uuid "3beec145-acf3-4b6e-9c00-5b8e285736e3";
+        skos:prefLabel "In het kader van een erkenningsdossier".
+
+    <http://data.lblod.info/id/information-request-reason/3beec145-acf3-4b6e-9c00-5b8e285736e4> a ext:ReasonCode,
+        skos:Concept;
+        mu:uuid "3beec145-acf3-4b6e-9c00-5b8e285736e4";
+        skos:prefLabel "In het kader van een wijzigingsdossier".
+
+    <http://data.lblod.info/id/information-request-reason/3beec145-acf3-4b6e-9c00-5b8e285736e5> a ext:ReasonCode,
+        skos:Concept;
+        mu:uuid "3beec145-acf3-4b6e-9c00-5b8e285736e5";
+        skos:prefLabel "In het kader van een informatie-uitwisseling (cfr. protocol) met een overheidsinstelling".
+  }
+}
--- a/config/proxy-https/proxy_ssl.conf
+++ b/config/proxy-https/proxy_ssl.conf
@@ -1,22 +0,0 @@
-
-server {
-  listen *:443;
-  server_name organisaties.abb.lblod.info;
-  ssl on;
-  ssl_certificate /etc/nginx/conf.d/cert.pem;
-  ssl_certificate_key /etc/nginx/conf.d/key.pem;
-
-  location / {
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
-        proxy_set_header Host $host;
-        proxy_set_header    X-Forwarded-For $remote_addr;
-        proxy_pass http://identifier;
-        client_max_body_size 3072m;
-  }
-
-  location ~ /authorization/callback(.*) {
-    rewrite ^ /torii/redirect.html permanent;
-  }
-}
--- a/config/proxy/web.conf
+++ b/config/proxy/web.conf
@@ -1,88 +0,0 @@
-events {
-
-}
-
-http {
-  server {
-    listen 80 default_server;
-    listen [::]:80 default_server;
-    server_name dev.contacthub.lblod.info;
-
-    location /v3/api-docs {
-        auth_basic "Contact Hub realm";
-        auth_basic_user_file /etc/nginx/conf.d/nginx.htpasswd;
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
-        proxy_set_header Host $host;
-        proxy_set_header    X-Forwarded-For $remote_addr;
-        proxy_pass http://identifier;
-        client_max_body_size 3072m;
-    }
-
-    location /delta {
-        auth_basic "Contact Hub realm";
-        auth_basic_user_file /etc/nginx/conf.d/nginx.htpasswd;
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
-        proxy_set_header Host $host;
-        proxy_set_header    X-Forwarded-For $remote_addr;
-        proxy_pass http://identifier;
-        client_max_body_size 3072m;
-    }
-    
-    location /bulk {
-        auth_basic "Contact Hub realm";
-        auth_basic_user_file /etc/nginx/conf.d/nginx.htpasswd;
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
-        proxy_set_header Host $host;
-        proxy_set_header    X-Forwarded-For $remote_addr;
-        proxy_pass http://identifier;
-        client_max_body_size 3072m;
-    }
-    
-    location /changes {
-        auth_basic "Contact Hub realm";
-        auth_basic_user_file /etc/nginx/conf.d/nginx.htpasswd;
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
-        proxy_set_header Host $host;
-        proxy_set_header    X-Forwarded-For $remote_addr;
-        proxy_pass http://identifier;
-        client_max_body_size 3072m;
-    }
-    
-    location /consolidated {
-        auth_basic "Contact Hub realm";
-        auth_basic_user_file /etc/nginx/conf.d/nginx.htpasswd;
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
-        proxy_set_header Host $host;
-        proxy_set_header    X-Forwarded-For $remote_addr;
-        proxy_pass http://identifier;
-        client_max_body_size 3072m;
-    }
-
-
-    location / {
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
-        proxy_set_header Host $host;
-        proxy_set_header    X-Forwarded-For $remote_addr;
-        proxy_pass http://identifier;
-        client_max_body_size 3072m;
-    }
-
-    location ~ /authorization/callback(.*) {
-        rewrite ^ /torii/redirect.html permanent;
-    }
-
-  }
-  
-}
--- a/config/resources/change-events.json
+++ b/config/resources/change-events.json
@@ -0,0 +1,104 @@
+{
+  "version": "0.1",
+  "prefixes": {
+    "ch": "http://data.lblod.info/vocabularies/contacthub/",
+    "code": "http://lblod.data.gift/vocabularies/organisatie/",
+    "dc_terms": "http://purl.org/dc/terms/",
+    "euro": "http://data.europa.eu/m8g/",
+    "ext": "http://mu.semte.ch/vocabularies/ext/",
+    "org": "http://www.w3.org/ns/org#",
+    "regorg": "http://www.w3.org/ns/regorg#",
+    "skos": "http://www.w3.org/2004/02/skos/core#",
+    "foaf": "http://xmlns.com/foaf/0.1/"
+  },
+  "resources": {
+    "change-events": {
+      "class": "org:ChangeEvent",
+      "attributes": {
+        "date": {
+          "type": "date",
+          "predicate": "dc_terms:date"
+        },
+        "description": {
+          "type": "string",
+          "predicate": "dc_terms:description"
+        }
+      },
+      "relationships": {
+        "type": {
+          "predicate": "ch:typeWijziging",
+          "target": "change-event-types",
+          "cardinality": "one"
+        },
+        "resulting-organizations": {
+          "predicate": "org:resultingOrganization",
+          "target": "organizations",
+          "cardinality": "many"
+        },
+        "original-organizations": {
+          "predicate": "org:originalOrganization",
+          "target": "organizations",
+          "cardinality": "many"
+        },
+        "results": {
+          "predicate": "code:veranderingsgebeurtenisResultaat",
+          "target": "change-event-results",
+          "cardinality": "many"
+        },
+        "decision": {
+          "predicate": "http://data.europa.eu/m8g/hasFormalFramework",
+          "target": "decisions",
+          "cardinality": "one"
+        }
+      },
+      "new-resource-base": "http://data.lblod.info/id/veranderingsgebeurtenissen/"
+    },
+    "change-event-results": {
+      "class": "code:VeranderingsgebeurtenisResultaat",
+      "attributes": {},
+      "relationships": {
+        "resulting-organization": {
+          "predicate": "ext:resultingOrganization",
+          "target": "organizations",
+          "cardinality": "one"
+        },
+        "status": {
+          "predicate": "code:resulterendeStatus",
+          "target": "organization-status-codes",
+          "cardinality": "one"
+        },
+        "result-from": {
+          "predicate": "code:veranderingsgebeurtenisResultaat",
+          "target": "change-events",
+          "cardinality": "one",
+          "inverse": true
+        }
+      },
+      "new-resource-base": "http://lblod.data.info/id/veranderingsgebeurtenis-resultaten/"
+    },
+    "change-event-types": {
+      "class": "code:Veranderingsgebeurtenis",
+      "attributes": {
+        "label": {
+          "type": "string",
+          "predicate": "skos:prefLabel"
+        }
+      },
+      "new-resource-base": "http://lblod.data.gift/concepts/"
+    },
+    "decisions": {
+      "class": "http://data.vlaanderen.be/ns/besluit#Besluit",
+      "attributes": {
+        "publication-date": {
+          "type": "date",
+          "predicate": "http://data.europa.eu/eli/ontology#date_publication"
+        },
+        "document-link": {
+          "type": "url",
+          "predicate": "foaf:page"
+        }
+      },
+      "new-resource-base": "http://lblod.data.info/id/besluiten/"
+    }
+  }
+}
--- a/config/resources/dcat.json
+++ b/config/resources/dcat.json
@@ -0,0 +1,157 @@
+{
+    "version": "0.1",
+    "prefixes": {
+        "dcat": "http://www.w3.org/ns/dcat#",
+        "dct": "http://purl.org/dc/terms/",
+        "prov": "http://www.w3.org/ns/prov#"
+    },
+    "resources": {
+        "catalogs": {
+            "class": "dcat:Catalog",
+            "attributes": {
+                "title": {
+                    "type": "string",
+                    "predicate": "dct:title"
+                },
+                "description": {
+                    "type": "string",
+                    "predicate": "dct:description"
+                },
+                "publisher": {
+                    "type": "url",
+                    "predicate": "dct:publisher"
+                },
+                "release-date": {
+                    "type": "datetime",
+                    "predicate": "dct:issued"
+                },
+                "modified": {
+                    "type": "datetime",
+                    "predicate": "dct:modified"
+                }
+            },
+            "relationships": {
+                "datasets": {
+                    "target": "datasets",
+                    "predicate": "dcat:dataset",
+                    "cardinality": "many"
+                }
+            },
+            "features": [
+                "include-uri"
+            ],
+            "new-resource-base": "http://data.lblod.info/id/catalog/"
+        },
+        "datasets": {
+            "class": "dcat:Dataset",
+            "attributes": {
+                "title": {
+                    "type": "string",
+                    "predicate": "dct:title"
+                },
+                "description": {
+                    "type": "string",
+                    "predicate": "dct:description"
+                },
+                "release-date": {
+                    "type": "datetime",
+                    "predicate": "dct:issued"
+                },
+                "modified": {
+                    "type": "datetime",
+                    "predicate": "dct:modified"
+                },
+                "type": {
+                    "type": "url",
+                    "predicate": "dct:type"
+                },
+                "subject": {
+                    "type": "url",
+                    "predicate": "dct:subject"
+                }
+            },
+            "relationships": {
+                "catalog": {
+                    "target": "catalogs",
+                    "predicate": "dcat:dataset",
+                    "cardinality": "one",
+                    "inverse": true
+                },
+                "distributions": {
+                    "target": "distributions",
+                    "predicate": "dcat:distribution",
+                    "cardinality": "many"
+                },
+                "previous-version": {
+                    "target": "datasets",
+                    "predicate": "prov:wasRevisionOf",
+                    "cardinality": "one"
+                },
+                "next-version": {
+                    "target": "datasets",
+                    "predicate": "prov:wasRevisionOf",
+                    "cardinality": "one",
+                    "inverse": true
+                }
+            },
+            "features": [
+                "include-uri"
+            ],
+            "new-resource-base": "http://data.lblod.info/id/dataset/"
+        },
+        "distributions": {
+            "class": "dcat:Distribution",
+            "attributes": {
+                "title": {
+                    "type": "string",
+                    "predicate": "dct:title"
+                },
+                "description": {
+                    "type": "string",
+                    "predicate": "dct:description"
+                },
+                "release-date": {
+                    "type": "datetime",
+                    "predicate": "dct:issued"
+                },
+                "modified": {
+                    "type": "datetime",
+                    "predicate": "dct:modified"
+                },
+                "type": {
+                    "type": "url",
+                    "predicate": "dct:type"
+                },
+                "download-url": {
+                    "type": "url",
+                    "predicate": "dcat:downloadURL"
+                },
+                "format": {
+                    "type": "string",
+                    "predicate": "dct:format"
+                },
+                "byte-size": {
+                    "type": "number",
+                    "predicate": "dcat:byteSize"
+                }
+            },
+            "relationships": {
+                "dataset": {
+                    "target": "datasets",
+                    "predicate": "dcat:distribution",
+                    "cardinality": "one",
+                    "inverse": true
+                },
+                "subject": {
+                    "target": "file",
+                    "predicate": "dct:subject",
+                    "cardinality": "one"
+                }
+            },
+            "features": [
+                "include-uri"
+            ],
+            "new-resource-base": "http://data.lblod.info/id/distribution/"
+        }
+    }
+}
--- a/config/resources/domain.json
+++ b/config/resources/domain.json
@@ -55,26 +55,6 @@
          "target": "agents-in-position",
          "cardinality": "many",
          "inverse": true
-        },
-        "registration": {
-          "predicate": "persoon:registratie",
-          "target": "identifiers",
-          "cardinality": "one"
-        },
-        "date-of-birth": {
-          "predicate": "persoon:heeftGeboorte",
-          "target": "dates-of-birth",
-          "cardinality": "one"
-        },
-        "nationalities": {
-          "predicate": "persoon:heeftNationaliteit",
-          "target": "nationalities",
-          "cardinality": "many"
-        },
-        "gender": {
-          "predicate": "persoon:geslacht",
-          "target": "gender-codes",
-          "cardinality": "one"
        }
      },
      "new-resource-base": "http://data.lblod.info/id/personen/"
@@ -83,11 +63,11 @@
      "class": "ch:AgentInPositie",
      "attributes": {
        "agent-start-date": {
-          "type": "datetime",
+          "type": "date",
          "predicate": "ch:startdatum"
        },
        "agent-end-date": {
-          "type": "datetime",
+          "type": "date",
          "predicate": "ch:eindedatum"
        }
      },
@@ -137,11 +117,11 @@
      "super": ["agents-in-position"],
      "attributes": {
        "start-date": {
-          "type": "datetime",
+          "type": "date",
          "predicate": "mandaat:start"
        },
        "end-date": {
-          "type": "datetime",
+          "type": "date",
          "predicate": "mandaat:einde"
        }
      },
@@ -185,7 +165,7 @@
      "super": ["mandatories"],
      "attributes": {
        "expected-end-date": {
-          "type": "datetime",
+          "type": "date",
          "predicate": "ere:geplandeEinddatumAanstelling"
        },
        "reason-stopped": {
@@ -319,14 +299,22 @@
          "cardinality": "many"
        },
        "changed-by": {
-          "predicate": "org:changedBy",
+          "predicate": "org:originalOrganization",
          "target": "change-events",
-          "cardinality": "many"
+          "cardinality": "many",
+          "inverse": true
        },
        "resulted-from": {
-          "predicate": "org:resultedFrom",
+          "predicate": "org:resultingOrganization",
          "target": "change-events",
-          "cardinality": "many"
+          "cardinality": "many",
+          "inverse": true
+        },
+        "change-event-results": {
+          "predicate": "ext:resultingOrganization",
+          "target": "change-event-results",
+          "cardinality": "many",
+          "inverse": true
        },
        "positions": {
          "predicate": "org:hasPost",
@@ -429,11 +417,6 @@
          "cardinality": "many",
          "inverse": true
        },
-        "associated-structures": {
-          "predicate": "ere:heeftVerbondenEntiteit",
-          "target": "associated-legal-structures",
-          "cardinality": "many"
-        },
        "minister-positions": {
          "predicate": "ere:wordtBediendDoor",
          "target": "minister-positions",
@@ -479,11 +462,11 @@
      "class": "besluit:Bestuursorgaan",
      "attributes": {
        "start-date": {
-          "type": "datetime",
+          "type": "date",
          "predicate": "mandaat:bindingStart"
        },
        "end-date": {
-          "type": "datetime",
+          "type": "date",
          "predicate": "mandaat:bindingEinde"
        }
      },
@@ -616,6 +599,18 @@
        "full-address": {
          "type": "string",
          "predicate": "locn:fullAddress"
+        },
+        "address-register-uri": {
+          "type": "url",
+          "predicate": "adres:verwijstNaar"
+        }
+
+      },
+      "relationships": {
+        "source": {
+          "predicate": "dc_terms:source",
+          "target": "concepts",
+          "cardinality": "one"
        }
      },
      "new-resource-base": "http://data.lblod.info/id/adressen/"
@@ -641,45 +636,16 @@
      },
      "new-resource-base": "http://data.lblod.info/id/vestigingen/"
    },
-    "change-events": {
-      "class": "org:ChangeEvent",
-      "attributes": {
-        "date": {
-          "type": "datetime",
-          "predicate": "dc_terms:date"
-        },
-        "description": {
-          "type": "string",
-          "predicate": "dc_terms:description"
-        }
-      },
-      "relationships": {
-        "type": {
-          "predicate": "ch:typeWijziging",
-          "target": "change-event-types",
-          "cardinality": "one"
-        },
-        "resulting-organization": {
-          "predicate": "org:resultedFrom",
-          "target": "organizations",
-          "cardinality": "many",
-          "inverse": true
-        },
-        "original-organization": {
-          "predicate": "org:changedBy",
-          "target": "organizations",
-          "cardinality": "many",
-          "inverse": true
-        }
-      },
-      "new-resource-base": "http://data.lblod.info/id/veranderingsgebeurtenissen/"
-    },
-    "change-event-types": {
-      "class": "code:Veranderingsgebeurtenis",
+    "concepts": {
+      "class": "skos:Concept",
      "attributes": {
        "label": {
          "type": "string",
          "predicate": "skos:prefLabel"
+        },
+        "alt-label": {
+          "type": "string",
+          "predicate": "skos:altLabel"
        }
      },
      "new-resource-base": "http://lblod.data.gift/concepts/"
@@ -771,43 +737,6 @@
      },
      "new-resource-base": "http://data.lblod.info/id/voorwaardenBedienaar/"
    },
-    "associated-legal-structures": {
-      "class": "ere:VerbondenJuridischeStructuren",
-      "attributes": {
-        "name": {
-          "type": "string",
-          "predicate": "skos:prefLabel"
-        }
-      },
-      "relationships": {
-        "registration": {
-          "predicate": "regorg:registration",
-          "target": "identifiers",
-          "cardinality": "one"
-        },
-        "legal-type": {
-          "predicate": "organisatie:rechtsvorm",
-          "target": "legal-form-types",
-          "cardinality": "one"
-        },
-        "address": {
-          "predicate": "locn:address",
-          "target": "addresses",
-          "cardinality": "one"
-        }
-      },
-      "new-resource-base": "http://data.lblod.info/id/verbondenJuridischeStructuren/"
-    },
-    "dates-of-birth": {
-      "class": "persoon:Geboorte",
-      "attributes": {
-        "date": {
-          "type": "datetime",
-          "predicate": "persoon:datum"
-        } 
-      },
-      "new-resource-base": "http://data.lblod.info/id/geboortes/"
-    },
    "nationalities": {
      "class": "euvoc:Country",
      "attributes": {
@@ -891,16 +820,6 @@
      },
      "new-resource-base": "http://lblod.data.gift/concepts/"
    },
-    "legal-form-types": {
-      "class": "code:Rechtsvormtype",
-      "attributes": {
-        "label": {
-          "type": "string",
-          "predicate": "skos:prefLabel"
-        }
-      },
-      "new-resource-base": "http://lblod.data.gift/concepts/"
-    },
    "document-types-criterions": {
      "class": "code:BedienaarCriteriumBewijsstuk",
      "attributes": {
--- a/config/resources/domain.lisp
+++ b/config/resources/domain.lisp
@@ -1,4 +1,3 @@
-
 (in-package :mu-cl-resources)

 (defparameter *include-count-in-paginated-responses* t)
@@ -12,4 +11,8 @@
 (defparameter *supply-cache-headers-p* t)

 (read-domain-file "domain.json")
-(read-domain-file "auth.json")
+(read-domain-file "auth.json")
+(read-domain-file "change-events.json")
+(read-domain-file "files-domain.lisp")
+(read-domain-file "dcat.json")
+(read-domain-file "privacy-centric-service.json")
--- a/config/resources/files-domain.lisp
+++ b/config/resources/files-domain.lisp
@@ -0,0 +1,13 @@
+(define-resource file ()
+  :class (s-prefix "nfo:FileDataObject")
+  :properties `((:filename :string ,(s-prefix "nfo:fileName"))
+                (:format :string ,(s-prefix "dct:format"))
+                (:size :number ,(s-prefix "nfo:fileSize"))
+                (:extension :string ,(s-prefix "dbpedia:fileExtension"))
+                (:created :datetime ,(s-prefix "nfo:fileCreated")))
+  :has-one `((file :via ,(s-prefix "nie:dataSource")
+                   :inverse t
+                   :as "download"))
+  :resource-base (s-url "http://data.lblod.info/files/")
+  :features `(no-pagination-defaults include-uri)
+  :on-path "files")
--- a/config/resources/privacy-centric-service.json
+++ b/config/resources/privacy-centric-service.json
@@ -0,0 +1,20 @@
+{
+  "version": "0.1",
+  "prefixes": {
+    "skos": "http://www.w3.org/2004/02/skos/core#",
+    "ext": "http://mu.semte.ch/vocabularies/ext/"
+  },
+  "resources": {
+    "request-reasons": {
+      "name": "request-reason",
+      "class": "ext:ReasonCode",
+      "attributes": {
+        "label": {
+          "type": "string",
+          "predicate": "skos:prefLabel"
+        }
+      },
+      "new-resource-base": "http://data.lblod.info/id/information-request-reason/"
+    }
+  }
+}
--- a/docker-compose.dev.yml
+++ b/docker-compose.dev.yml
@@ -3,6 +3,8 @@ version: '3.4'
 services:
  identifier:
    restart: "no"
+    ports:
+      - "80:80"
  dispatcher:
    restart: "no"
  triplestore:
@@ -18,6 +20,8 @@ services:
  cache:
    restart: "no"
  kalliope-api:
+    environment:
+      SPRING_SECURITY_CONFIG: "/config/security-dev.yml"
    restart: "no"
  deltanotifier:
    restart: "no"
@@ -29,9 +33,14 @@ services:
    restart: "no"
  login:
    restart: "no"
-  web:
-    ports:
-      - "80:80"
+  accountdetail:
+    restart: "no"
+  privacy:
+    restart: "no"
+  adressenregister:
    restart: "no"
  frontend:
+    image: lblod/frontend-contact-hub:latest
+    restart: "no"
+  uri-info:
    restart: "no"
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -9,9 +9,10 @@ x-logging:

 services:
  identifier:
-    image: semtech/mu-identifier:1.8.1
+    image: semtech/mu-identifier:1.9.1
    environment:
      DEFAULT_MU_AUTH_ALLOWED_GROUPS_HEADER: "[{\"variables\":[],\"name\":\"public\"}]"
+      SESSION_COOKIE_SECURE: "on"
    labels:
      - "logging=true"
    restart: always
@@ -32,12 +33,10 @@ services:
    volumes:
      - ./data/db:/data
      - ./config/db/virtuoso.ini:/data/virtuoso.ini
-    labels:
-      - "logging=true"
    restart: always
    logging: *default-logging
  db:
-    image: semtech/mu-authorization:0.6.0-beta.7
+    image: cecemel/mu-authorization:0.6.0-beta.8
    environment:
      MU_SPARQL_ENDPOINT: "http://triplestore:8890/sparql"
      LOG_OUTGOING_SPARQL_QUERIES: "true"
@@ -47,6 +46,10 @@ services:
      ERROR_ON_UNWRITTEN_DATA: "true"
    volumes:
      - ./config/authorization:/config
+    labels:
+      - "logging=true"
+    restart: always
+    logging: *default-logging
  migrations:
    image: semtech/mu-migrations-service:0.7.0
    links:
@@ -58,7 +61,7 @@ services:
    restart: always
    logging: *default-logging
  resource:
-    image: semtech/mu-cl-resources:latest
+    image: semtech/mu-cl-resources:feature-all-errors-as-json-api-errors
    links:
      - db:database
    volumes:
@@ -76,19 +79,29 @@ services:
    restart: always
    logging: *default-logging
  kalliope-api:
-    image: lblod/jsonld-delta-service:0.2.0
+    image: lblod/jsonld-delta-service:0.5.4
    volumes:
      - ./config/kalliope:/config
      - ./data/files:/share
+    links:
+      - db:database
    environment:
      SERVER_PORT: "80"
      LOGGING_LEVEL: "INFO"
      SPARQL_ENDPOINT: "http://db:8890/sparql"
+      LIMIT_SIZE: "10000"
+    labels:
+      - "logging=true"
    restart: always
+    logging: *default-logging
  deltanotifier:
-    image: semtech/mu-delta-notifier:0.1.0
+    image: cecemel/delta-notifier:0.2.0-beta.2
    volumes:
      - ./config/delta:/config
+    labels:
+      - "logging=true"
+    restart: always
+    logging: *default-logging
  sink:
    image: nginx:1.15.2
    volumes:
@@ -98,49 +111,224 @@ services:
    restart: always
    logging: *default-logging
  login:
-    image: lblod/acmidm-login-service:0.9.2-organisatie_portaal
-    links:
-      - db:database
+    image: lblod/acmidm-login-service:0.9.2
    environment:
+      MU_APPLICATION_AUTH_USERID_CLAIM: "vo_id"
+      MU_APPLICATION_GRAPH: "http://mu.semte.ch/graphs/contacthub/accounts"
+      MU_APPLICATION_AUTH_ROLE_CLAIM: "abb_organisatieportaal_rol_3d"
      MU_APPLICATION_AUTH_DISCOVERY_URL: "https://authenticatie-ti.vlaanderen.be/op"
      MU_APPLICATION_AUTH_CLIENT_ID: "677af572-2e2f-4e61-ad38-036723bb314c"
      MU_APPLICATION_AUTH_REDIRECT_URI: "https://organisaties.abb.lblod.info/authorization/callback"
-      MU_APPLICATION_AUTH_CLIENT_SECRET: ""
+      MU_APPLICATION_AUTH_CLIENT_SECRET: "secret"
    labels:
      - "logging=true"
    restart: always
    logging: *default-logging
    links:
      - db:database
+  accountdetail:
+    image: lblod/account-detail-service:latest
+    labels:
+      - "logging=true"
+    environment:
+      MU_APPLICATION_GRAPH: "http://mu.semte.ch/graphs/contacthub/accounts"
+    links:
+      - db:database
+    restart: always
+    logging: *default-logging
  privacy:
-    image: lblod/privacy-centric-service:0.0.1
+    image: lblod/privacy-centric-service:0.3.0
+    labels:
+      - "logging=true"
    environment:
      SERVER_PORT: "80"
      SPARQL_ENDPOINT: "http://db:8890/sparql"
      LOGGING_LEVEL: "INFO"
-      DEFAULT_GRAPH: "http://mu.semte.ch/graphs/contacthub/141d9d6b-54af-4d17-b313-8d1c30bc3f5b/ChAdmin"
+      DEFAULT_GRAPH: "http://mu.semte.ch/graphs/privacy-centric-graph"
      SESSION_GRAPH: "http://mu.semte.ch/graphs/sessions"
+      APP_GRAPH: "http://mu.semte.ch/graphs/organisatieportaal"
+    labels:
+      - "logging=true"
+    restart: always
+    logging: *default-logging
  adressenregister:
    image: lblod/adressenregister-fuzzy-search-service:0.5.0
-  web:
-    image: nginx
-    volumes:
-       - ./config/proxy:/etc/nginx/conf.d
-       - ./config/proxy/web.conf:/etc/nginx/nginx.conf:ro
-    links:
-      - identifier:identifier
    labels:
      - "logging=true"
    restart: always
    logging: *default-logging
  frontend:
-    image: lblod/frontend-contact-hub:1.1.0
-    labels:
-      - "logging=true"
+    image: lblod/frontend-contact-hub:1.5.4
+    volumes:
+      - ./config/frontend/add-x-frame-options-header.conf:/config/add-x-frame-options.conf
    environment:
      EMBER_OAUTH_API_REDIRECT_URL: "https://organisaties.abb.lblod.info/authorization/callback"
      EMBER_OAUTH_API_KEY: "677af572-2e2f-4e61-ad38-036723bb314c"
      EMBER_OAUTH_API_BASE_URL: "https://authenticatie-ti.vlaanderen.be/op/v1/auth"
      EMBER_OAUTH_API_LOGOUT_URL: "https://authenticatie-ti.vlaanderen.be/op/v1/logout"
      EMBER_OAUTH_API_SCOPE: "openid vo profile abb_organisatieportaal"
+    labels:
+      - "logging=true"
    restart: always
+    logging: *default-logging
+  uri-info:
+    image: redpencil/mu-uri-info-service:0.2.1
+    links:
+      - db:database
+    labels:
+      - "logging=true"
+    restart: always
+    logging: *default-logging
+  file:
+    image: semtech/mu-file-service:3.2.0
+    volumes:
+      - ./data/files:/share
+    labels:
+      - "logging=true"
+    links:
+      - db:database
+    restart: always
+    logging: *default-logging
+  jobs-controller:
+    image: lblod/job-controller-service:0.7.0
+    links:
+      - db:database
+    volumes:
+      - ./config/jobs-controller/:/config/
+################################################################################
+# DELTA GENERAL
+################################################################################
+  delta-producer-dump-file-publisher:
+    image: lblod/delta-producer-dump-file-publisher:0.4.0
+    volumes:
+      - ./config/delta-producer/dump-file-publisher:/config
+      - ./data/files:/share
+    environment:
+      FILES_GRAPH: 'http://mu.semte.ch/graphs/public' # Note: this will be extracted in a config per job one day
+      DCAT_DATASET_GRAPH: 'http://mu.semte.ch/graphs/public'
+    links:
+      - db:database
+    restart: always
+    logging: *default-logging
+################################################################################
+# DELTA ADMINISTRATIVE-UNITS: START
+################################################################################
+  delta-producer-bg-jobs-initiator-administrative-units:
+    image: lblod/delta-producer-background-jobs-initiator:0.3.1
+    environment:
+      JOBS_GRAPH: "http://mu.semte.ch/graphs/organisatieportaal"
+      DUMP_FILE_CREATION_JOB_OPERATION: 'http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/deltaDumpFileCreation/administrative-units'
+      INITIAL_PUBLICATION_GRAPH_SYNC_JOB_OPERATION: 'http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/initialPublicationGraphSyncing/administrative-units'
+      HEALING_JOB_OPERATION: 'http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/healingOperation/administrative-units'
+      CRON_PATTERN_DUMP_JOB: '0 0 4 * * 6' # weekly on saturday
+      CRON_PATTERN_HEALING_JOB: '0 0 4 * * *' # everyday at 4 AM
+      START_INITIAL_SYNC: 'false' # prefer to disable it now. We want to have feeling with how the DB acts.
+    labels:
+      - "logging=true"
+    links:
+      - db:database
+    restart: always
+    logging: *default-logging
+  delta-producer-pub-graph-maintainer-administrative-units:
+    image: lblod/delta-producer-publication-graph-maintainer:0.7.0
+    environment:
+      MAX_BODY_SIZE: "50mb"
+      JOBS_GRAPH: "http://mu.semte.ch/graphs/organisatieportaal"
+      RELATIVE_FILE_PATH: "deltas/administrative-units"
+      PUBLICATION_GRAPH: 'http://redpencil.data.gift/id/deltas/producer/administrative-units'
+      HEALING_JOB_OPERATION: 'http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/healingOperation/administrative-units'
+      INITIAL_PUBLICATION_GRAPH_SYNC_JOB_OPERATION: 'http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/initialPublicationGraphSyncing/administrative-units'
+      QUEUE_POLL_INTERVAL: 3000
+      USE_VIRTUOSO_FOR_EXPENSIVE_SELECTS: "true" # some queries are just too expensive
+      SKIP_MU_AUTH_INITIAL_SYNC: 'true'
+      HEALING_PATCH_GRAPH_BATCH_SIZE: 500
+    volumes:
+      - ./config/delta-producer/administrative-units:/config
+      - ./data/files/:/share
+    links:
+      - db:database
+      - triplestore:virtuoso
+    restart: always
+    logging: *default-logging
+  delta-producer-json-diff-publisher-administrative-units:
+    image: lblod/delta-producer-json-diff-file-publisher:0.2.3
+    environment:
+      MAX_BODY_SIZE: "50mb"
+      ERROR_GRAPH: "http://mu.semte.ch/graphs/organisatieportaal"
+      RELATIVE_FILE_PATH: "deltas/administrative-units"
+      PUBLISHER_URI: "http://data.lblod.info/services/delta-production-json-diff-file-manager/administrative-units"
+      PUBLICATION_GRAPH: 'http://redpencil.data.gift/id/deltas/producer/administrative-units'
+      DELTA_INTERVAL_MS: 10000
+      PRETTY_PRINT_DIFF_JSON: "true"
+    volumes:
+      - ./data/files:/share
+    labels:
+      - "logging=true"
+    links:
+      - db:database
+    restart: always
+    logging: *default-logging
+################################################################################
+# DELTA ADMINISTRATIVE-UNITS: END
+################################################################################
+################################################################################
+# DELTA ORGANIZATIONS: START
+################################################################################
+  delta-producer-bg-jobs-initiator-organizations:
+    image: lblod/delta-producer-background-jobs-initiator:0.3.1
+    environment:
+      JOBS_GRAPH: "http://mu.semte.ch/graphs/organisatieportaal"
+      DUMP_FILE_CREATION_JOB_OPERATION: 'http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/deltaDumpFileCreation/organizations'
+      INITIAL_PUBLICATION_GRAPH_SYNC_JOB_OPERATION: 'http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/initialPublicationGraphSyncing/organizations'
+      HEALING_JOB_OPERATION: 'http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/healingOperation/organizations'
+      CRON_PATTERN_DUMP_JOB: '30 9 8-18/2 * * MON-FRI' # At second :30, at minute :09, every 2 hours between hours 08am and 18pm, every day between Monday and Friday, every month
+      CRON_PATTERN_HEALING_JOB: '0 0 4 * * *' # everyday at 4 AM
+      START_INITIAL_SYNC: 'false' # prefer to disable it now. We want to have feeling with how the DB acts.
+    labels:
+      - "logging=true"
+    links:
+      - db:database
+    restart: always
+    logging: *default-logging
+  delta-producer-pub-graph-maintainer-organizations:
+    image: lblod/delta-producer-publication-graph-maintainer:0.7.0
+    environment:
+      MAX_BODY_SIZE: "50mb"
+      JOBS_GRAPH: "http://mu.semte.ch/graphs/organisatieportaal"
+      RELATIVE_FILE_PATH: "deltas/organizations"
+      PUBLICATION_GRAPH: 'http://redpencil.data.gift/id/deltas/producer/organizations'
+      HEALING_JOB_OPERATION: 'http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/healingOperation/organizations'
+      INITIAL_PUBLICATION_GRAPH_SYNC_JOB_OPERATION: 'http://redpencil.data.gift/id/jobs/concept/JobOperation/deltas/initialPublicationGraphSyncing/organizations'
+      QUEUE_POLL_INTERVAL: 3000
+      USE_VIRTUOSO_FOR_EXPENSIVE_SELECTS: "true" # some queries are just too expensive
+      SKIP_MU_AUTH_INITIAL_SYNC: 'true'
+      HEALING_PATCH_GRAPH_BATCH_SIZE: 500
+    volumes:
+      - ./config/delta-producer/organizations:/config
+      - ./data/files/:/share
+    links:
+      - db:database
+      - triplestore:virtuoso
+    restart: always
+    logging: *default-logging
+  delta-producer-json-diff-publisher-organizations:
+    image: lblod/delta-producer-json-diff-file-publisher:0.2.3
+    environment:
+      MAX_BODY_SIZE: "50mb"
+      ERROR_GRAPH: "http://mu.semte.ch/graphs/organisatieportaal"
+      RELATIVE_FILE_PATH: "deltas/organizations"
+      PUBLISHER_URI: "http://data.lblod.info/services/delta-production-json-diff-file-manager/organizations"
+      PUBLICATION_GRAPH: 'http://redpencil.data.gift/id/deltas/producer/organizations'
+      DELTA_INTERVAL_MS: 10000
+      PRETTY_PRINT_DIFF_JSON: "true"
+    volumes:
+      - ./data/files:/share
+    labels:
+      - "logging=true"
+    links:
+      - db:database
+    restart: always
+    logging: *default-logging
+################################################################################
+# DELTA ORGANIZATIONS: END
+################################################################################
Author	SHA1	Message	Date
Nordine Bittich	cdf4417ca5	bump frontend	2022-02-10 14:09:45 +01:00
Boris De Vloed	5a318a99fe	add contact types (#88 ) * add contact types * move migration to 2022 directory Co-authored-by: Nordine Bittich <nordine@bittich.be>	2022-02-10 13:53:48 +01:00
Nordine Bittich	f36e2ba706	bump frontend	2022-02-01 18:05:20 +01:00
Nordine Bittich	f41430b699	bump frontend	2022-01-26 15:43:11 +01:00
Sam Van Campenhout	422e92a343	Temporarily rename the change-event-result organization relationship (#94 ) This relationship uses the same `org:organization` predicate that is also used for the local involvements relationship. When querying for local involvements data when an organization also has change events data, mu-cl-resources receives the change events data instead and runs into errors. This is likely a bug in the micro service itself. Renaming the predicate is a quick workaround so we have more time to find the real solution for the problem without a broken app.	2022-01-25 20:04:18 +01:00
Nordine Bittich	b5a7eb1755	bump frontend	2022-01-24 11:28:47 +01:00
claire-lovisa	a3478e997c	Merge pull request #93 from lblod/features/new-reasons-code add new reason code	2022-01-20 14:53:33 +01:00
Nordine Bittich	7aa969c17b	add new reason code	2022-01-20 10:27:55 +01:00
claire-lovisa	814a232bf8	Rename migration with wrong timestamps (#92 )	2022-01-19 13:57:29 +01:00
Nordine Bittich	2ec0184f25	bump frontend 1.5.0 (#91 )	2022-01-13 17:12:37 +01:00
Boris De Vloed	4d7b448c70	Merge pull request #90 from lblod/feature/bump-privacy bump privacy service	2022-01-13 15:52:08 +01:00
Nordine Bittich	7a5d097fd3	bump privacy service	2022-01-13 14:56:13 +01:00
Boris De Vloed	d58c4f1dde	Merge pull request #89 from lblod/feature/fix-privacy-service fix app graph for privacy service	2022-01-13 10:47:06 +01:00
Nordine Bittich	d2b13e291a	fix app graph for privacy service	2022-01-13 10:43:54 +01:00
Boris De Vloed	40b12ef857	Merge pull request #87 from lblod/feature/delete-old-ce-data delete old change event data	2022-01-10 11:50:34 +01:00
Nordine Bittich	97fdd21d79	delete old change event data	2022-01-10 10:19:03 +01:00
Sam Van Campenhout	4dd33478d1	Use `date` instead of `datetime` were needed (#86 ) If only the date is relevant we should not store it as a `datetime` since that would add timezone information which might cause the date to be displayed incorrectly in the frontend.	2022-01-06 10:34:52 +01:00
Sam Van Campenhout	32175ef883	Change event model updates (#75 ) * Config changes to support the new "change event" data model * Add mock data that matches the new change event model This data can be inserted into the database by mounting the folder into the migrations service. Co-authored-by: Boris De Vloed <boris.de.vloed@gmail.com> Co-authored-by: Boris De Vloed <boris.de.vloed@gmail.com>	2022-01-06 09:25:06 +01:00
Boris De Vloed	b3ea4a1958	Merge pull request #85 from lblod/fix/cron-ambiguity use mon-fri instead of numbers	2021-12-17 14:52:47 +01:00
Boris De Vloed	7b84f0f28d	use mon-fri instead of number	2021-12-17 14:47:02 +01:00
Boris De Vloed	f56d56d137	corrected cron schedule	2021-12-16 18:03:01 +01:00
Boris De Vloed	b41f35c90b	Merge pull request #84 from lblod/feature/bump-jsonld-api-2 bump jsonld api	2021-12-16 17:14:51 +01:00
Boris De Vloed	9b67988b76	bump jsonld api	2021-12-16 17:13:41 +01:00
Boris De Vloed	7438b38bae	bump jsonld api (#83 )	2021-12-16 16:11:41 +01:00
Boris De Vloed	78f1bd0233	Merge pull request #82 from lblod/chore/bump-log4j-spring bump privacy service & kalliope api	2021-12-15 11:41:30 +01:00
Nordine Bittich	e1f73b4179	bump privacy service & kalliope api	2021-12-15 10:33:59 +01:00
Nordine Bittich	8b505d6fa8	bump frontend	2021-12-14 17:32:38 +01:00
Boris De Vloed	59bdee66b1	removed unused delta rule (#81 )	2021-12-14 13:55:03 +01:00
Boris De Vloed	f556d22fa0	Merge pull request #80 from lblod/feature/bump-java-app bump java apps	2021-12-13 10:35:32 +01:00
Boris De Vloed	4fd77859ef	Merge branch 'development' into feature/bump-java-app	2021-12-13 10:34:48 +01:00
Nordine Bittich	ad05fff3ba	bump java app	2021-12-13 10:16:44 +01:00
Boris De Vloed	fed1fb8975	Merge pull request #79 from lblod/feature/use-ttl-dumps-for-api simplified cron config	2021-12-10 10:39:50 +01:00
Boris De Vloed	713ceb5f1a	simplified cron config	2021-12-10 10:38:22 +01:00
Boris De Vloed	7ff0480faf	Merge pull request #78 from lblod/feature/use-ttl-dumps-for-api Feature/use ttl dumps for api	2021-12-10 09:39:25 +01:00
Boris De Vloed	3930b87237	add config changes	2021-12-10 09:38:15 +01:00
Boris De Vloed	1008af8c08	Fix/type eredienst export (#77 ) * added typeEredienst * fix typo in graph name	2021-12-08 17:50:17 +01:00
Boris De Vloed	cbfe243b3e	fix typo in graph name	2021-12-08 16:53:39 +01:00
Boris De Vloed	834897c0c2	added typeEredienst	2021-12-08 15:24:46 +01:00
Boris De Vloed	f9b17ced4c	Merge pull request #76 from lblod/feature/acmidm-refactor acm idm roles	2021-12-06 11:05:49 +01:00
Nordine Bittich	a47c9c384d	order migrations	2021-12-06 10:54:17 +01:00
Nordine Bittich	9a74e1e1ba	bugfix	2021-12-03 14:21:23 +01:00
Nordine Bittich	4000c9a50f	changing graph	2021-12-03 11:32:03 +01:00
Nordine Bittich	9e63016553	change graph	2021-12-03 11:24:05 +01:00
Nordine Bittich	3541a5f66b	acm idm roles	2021-12-03 11:22:01 +01:00
cecemel	566ec39d9a	Feature/delta producer administrative units (#67 ) * Setting up file-service - pre-requisite to download dumps - pre-requiiste to download the json-diff files - security considerations: the content of the files created here, is - assumed to be public data, hence we allow it to be in the public graph * Bumping deltanotifier and mu-auth, which need to be able to work with mu-scop-id's * Delta-producer have multiple background-jobs with different tasks Hence the introduction of the jobs-controller. Note: in a more advanced configuration, you can easily extend the tasks related to one job. * A pre-requisite to serve dumps, is DCAT api support The delta-producers make a periodic dump of what is supposed to be published. They are published according to the DCAT data-model. Security-considerations: the DCAT producer by the delta-producer flow, are considered to be public data, hence added to the public graph. * Introduction of the delta-producer-dump-file-publisher Service responsible for creating dumps for the (potentially many) data delta flows. Here only for the administrative-units, but this can be extended in the future, in the config. * Introduction of delta-producer-background-jobs-initiator This service is responsible for triggering the background jobs related to the delta-productoin of the administrative-units. It trigger currently three jobs: - INITIAL_SYNC: this is the first job to fill the publication graph. In theory, this is only run once per deploy - HEALING_JOB: This is a periodic job, which checks what information is published vs. what information should have been published (according to a configuration). If differences are found, because delta-messages never arrived, they are compensated here/ - DUMP_JOB: A periodic job to create a dump of the publication graph. This is especially useful for consumers, who don't have to replay the whole delta-diffs, but just can start from the latest sync point. * Introduction of delta-producer-publication-graph-maintainer This service is the core of the logic which determines what should be published. The configuration is provided here, and can be elaborated refined in the config. It also excutes the healing logic. * Introduction of delta-producer-json-diff-file-publisher This simple service, listens to the updates performed on the publication graph, and serialized these to json-files which are compatible with current consumers * Missing dispatcher rules for DCAT * Various small things: - outline, whitespaces and comments * Update README.md * bump delta-producer-publication-graph-maintainer * Add organizations (KAL) - Work in progress * added organizations graph maintainer * removed inverses, added all bestuur types * refactored kalliope api Co-authored-by: Boris De Vloed <boris.de.vloed@gmail.com>	2021-12-03 11:20:32 +01:00
Nordine Bittich	5b48852463	Bump frontend (#74 )	2021-11-26 14:58:09 +01:00
Nordine Bittich	a44eab2e45	bump privacy service (#73 )	2021-11-25 15:26:11 +01:00
Nordine Bittich	819c434f3d	bump frontend (#72 )	2021-11-25 13:49:52 +01:00
Sam Van Campenhout	b5a7351189	Merge pull request #71 from lblod/chore/remove-privacy-centric-config Remove config related to the sensitive data feature	2021-11-23 16:38:55 +01:00
Nordine Bittich	3dc9b1a0b4	sparql endpoint for prod	2021-11-23 16:37:18 +01:00
Sam Van Campenhout	929dc59ee5	Remove config related to the sensitive data feature We no longer use mu-cl-resources to manage this data so we can remove it from the configuration.	2021-11-23 16:33:40 +01:00
Sam Van Campenhout	b6e1458d8a	Add a new `/request-reasons` endpoint (#70 ) This can be used to retrieve all the possible options.	2021-11-23 15:45:42 +01:00
Nordine Bittich	8c7ba7afec	migrate private data (#69 ) * migrate private data * bind subject before optional Co-authored-by: Boris De Vloed <boris.de.vloed@gmail.com>	2021-11-23 10:36:41 +01:00
Nordine Bittich	545622b972	bump frontend	2021-11-18 16:52:37 +01:00
Sam Van Campenhout	13e7337574	Merge pull request #68 from lblod/feature/only-allow-sparql-endpoint-to-acc-dev sparql endpoint only on dev/acc environment	2021-11-18 15:54:00 +01:00
Nordine Bittich	48810caf68	fix typo	2021-11-18 14:37:55 +01:00
Nordine Bittich	fe7c0d2c0f	only allow sparql endpoint to acc/dev	2021-11-18 14:32:21 +01:00
Boris De Vloed	2c26b0d25c	Merge pull request #66 from lblod/chore/tweak-database Added two tweaked database settings	2021-11-17 08:26:20 +01:00
felix	97cc023be5	Added two tweaked database settings Note: virtuoso-production.ini might currently be overkill. Could consider not using it.	2021-11-16 16:27:42 +01:00
Boris De Vloed	8d58d87a54	only send deltas for app graph (#64 )	2021-11-15 11:26:05 +01:00
Sam Van Campenhout	56c0583c62	Prevent services from restarting in development (#63 )	2021-11-12 09:47:00 +01:00
Sam Van Campenhout	ad919b1f0e	Merge pull request #60 from lblod/feature/crab-changes changes for crab	2021-11-10 16:38:52 +01:00
Nordine Bittich	abc5d9256c	fix dispatcher	2021-11-10 14:56:28 +01:00
Nordine Bittich	fb2fa6242f	fix dispatcher	2021-11-10 14:51:56 +01:00
Boris De Vloed	9e5d45adb9	Merge pull request #62 from lblod/feature/yasgui Feature/yasgui	2021-11-10 14:23:59 +01:00
Nordine Bittich	c716667801	change graph for privacy	2021-11-10 11:34:43 +01:00
Nordine Bittich	ed86245a2d	bugfix	2021-11-09 16:07:41 +01:00
Nordine Bittich	567740ae86	yasgui	2021-11-09 15:43:09 +01:00
Nordine Bittich	0bf3dca9bf	remove basic auth from readme (deprecated)	2021-11-08 18:53:23 +01:00
Nordine Bittich	45a5dff52a	fix file extension	2021-11-08 14:33:24 +01:00
Nordine Bittich	e6a167c402	ensure source crab migration will run	2021-11-05 10:40:38 +01:00
Nordine Bittich	670c1591c6	bugfix	2021-11-05 10:31:08 +01:00
Nordine Bittich	478affc609	bugfix	2021-11-05 10:29:14 +01:00
Sam Van Campenhout	65f9ca1558	Merge pull request #61 from lblod/chore/remove-connected-legal-structures Remove all code related to "verbonden juridische structuren"	2021-11-05 10:07:01 +01:00
Sam Van Campenhout	60ee996e36	Remove all code related to "verbonden juridische structuren" This functionality is no longer needed.	2021-11-03 12:59:18 +01:00
Nordine Bittich	52bc6e5d60	changes for crab	2021-11-03 10:48:12 +01:00
Aad Versteden	74fb5f31f5	Return torrii redirect on /authorization/callback	2021-10-29 14:41:15 +02:00
Aad Versteden	d370f3dfd6	Add logging to accountdetail service	2021-10-29 14:07:08 +02:00
Aad Versteden	3227807746	Merge remote-tracking branch 'origin/feature/remove-proxy' into release/merge-for-qa	2021-10-29 14:05:17 +02:00
Aad Versteden	5862f8d005	Bump resource	2021-10-29 14:04:57 +02:00
Aad Versteden	625fa5c8fe	Consistent newlines in dispatcher.ex	2021-10-29 13:52:39 +02:00
Aad Versteden	cb7d6029c5	Merge branch 'master' into feature/remove-acmidm-account-from-public	2021-10-29 11:51:16 +02:00
Aad Versteden	8aac877413	Whitespace cleanup	2021-10-29 11:45:02 +02:00
Nordine Bittich	32f53c258a	ignore security.yml	2021-10-25 14:38:22 +02:00
Nordine Bittich	c7cb1b335c	bugfix	2021-10-25 14:32:44 +02:00
Nordine Bittich	97d066b723	remove delta endpoint	2021-10-25 14:16:54 +02:00
Nordine Bittich	f7979fca31	remove bulk endpoint	2021-10-25 14:14:01 +02:00
Nordine Bittich	765cc8d955	bump jsonld-delta-service	2021-10-25 14:02:06 +02:00
Nordine Bittich	d122760794	bump kalliope & disable security on dev	2021-10-22 10:19:36 +02:00
Nordine Bittich	114df6679b	port 80 mapped to dev	2021-10-21 18:38:50 +02:00
Nordine Bittich	db5dec4a39	remove proxy for basic auth	2021-10-21 18:15:29 +02:00
Sam Van Campenhout	93e75cb09e	Merge pull request #58 from lblod/feature/secure-cookie Set secure cookie option	2021-10-20 13:33:58 +02:00
Aad Versteden	5c9bd8e6e8	Set secure cookie option Cookies should have the secure attribute. Defaulting that in this PR.	2021-10-20 13:22:21 +02:00
Aad Versteden	253b9f2e42	Consistent logging statements (#45 ) These logging statements are more consistent than what was there before. They're all there, except for app-http-logger logging for the triplestore. Logging happens on both source as well as on the target. Because the triplestore is a sink, we don't have to have http for it per se.	2021-10-19 10:53:04 +02:00
Sam Van Campenhout	aa751ec573	Merge pull request #55 from lblod/chore/remove-config-proxy remove proxy config for working with acm/idm locally	2021-10-19 10:50:41 +02:00
Nordine Bittich	03dab60bea	remove account spec	2021-10-19 10:06:38 +02:00
Nordine Bittich	b7e8cfe15a	use new microservice to fetch account	2021-10-19 10:00:52 +02:00
Sam Van Campenhout	cd37d596c1	Enable the uri-info service again (#57 ) This allows us to retrieve the rdf type and uuid of a resource uri.	2021-10-18 10:17:10 +02:00
Sam Van Campenhout	333c85f027	Merge pull request #54 from lblod/feature/x-frame-options Add x-frame-options when hosting frontend pages	2021-10-13 16:14:19 +02:00
Sam Van Campenhout	1c25a0192c	Add the `always` param to the X-Frame-Options header This ensures that the header is added to all responses regardless of response code. More information: http://nginx.org/en/docs/http/ngx_http_headers_module.html	2021-10-13 16:01:52 +02:00
Nordine Bittich	0cdc8ce8b3	Bump MU-CL-RESOURCE	2021-10-12 10:07:55 +02:00
Nordine Bittich	00aa5dec5a	remove proxy config for working with acm/idm locally	2021-10-11 13:05:26 +02:00
Aad Versteden	6bdb5a7e57	Add x-frame-options when hosting frontend pages We don't want these pages to be contained in a frame. The x-frame-options servers that use.	2021-10-10 19:37:10 +02:00
Nordine Bittich	b114289555	refactoring PR	2021-10-07 15:53:13 +02:00
Nordine Bittich	31373fba53	wrong docker compose version	2021-10-06 11:53:43 +02:00
Nordine Bittich	695520928b	remove account from public	2021-10-06 11:49:53 +02:00
Boris De Vloed	db9b8bf65b	Merge pull request #51 from lblod/chore/bump-nginx-proxy bump nginx version	2021-10-05 09:34:49 +02:00
Nordine Bittich	e6d2cc59fc	bump nginx version	2021-10-05 09:10:02 +02:00
				`@@ -0,0 +1 @@`
				`http://mu.semte.ch/graphs/organisatieportaal`