argos/dmp-backend/web/src/main/resources/config/permissions.yml

permissions:
  extendedClaims: [ ]
  policies:
    ###### Should Remove after Refactor
    PublicRole:
      roles: [ ]
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    AdminRole:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DatasetProfileManagerRole:
      roles:
        - DatasetProfileManager
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    ManagerRole:
      roles:
        - Manager
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    UserRole:
      roles:
        - User
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    AuthenticatedRole:
      roles: []
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: true
    AnonymousRole:
      roles: []
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    
    ###### 
    
    
    # Language
    BrowseLanguage:
      roles: [ ]
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    EditLanguage:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # Statistics
    BrowseStatistics:
      roles: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: true
    BrowsePublicStatistics:
      roles: [ ]
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    # Description
    BrowseDescription:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDescription:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDescription:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # DescriptionTemplateType
    BrowseDescriptionTemplateType:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDescriptionTemplateType:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDescriptionTemplateType:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # DescriptionTemplate
    BrowseDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    CloneDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    CreateNewVersionDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    ImportDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    ExportDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # Dmp
    BrowseDmp:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDmp:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDmp:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    CreateNewVersionDmp:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # DmpBlueprint
    BrowseDmpBlueprint:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDmpBlueprint:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    CloneDmpBlueprint:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    ExportDmpBlueprint:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    ImportDmpBlueprint:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDmpBlueprint:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # EntityDoi
    BrowseEntityDoi:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditEntityDoi:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteEntityDoi:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false

    # ViewPage Permissions
    ViewDescriptionTemplateTypePage:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false

    # Reference Permissions
    BrowseReference:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditReference:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteReference:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false

    # DmpReference Permissions
    BrowseDmpReference:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDmpReference:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDmpReference:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false

      # DescriptionReference Permissions
      BrowseDescriptionReference:
        roles:
          - Admin
        clients: [ ]
        allowAnonymous: false
        allowAuthenticated: false
      EditDescriptionReference:
        roles:
          - Admin
        clients: [ ]
        allowAnonymous: false
        allowAuthenticated: false
      DeleteDescriptionReference:
        roles:
          - Admin
        claims: [ ]
        clients: [ ]
        allowAnonymous: false
        allowAuthenticated: false
task #9088 Authorization model should be changed to be Permission based 2023-10-17 14:22:05 +02:00			`permissions:`
			`extendedClaims: [ ]`
			`policies:`
task #9088 Authorization model should be changed to be Permission based 2023-10-18 17:52:03 +02:00			`###### Should Remove after Refactor`
			`PublicRole:`
			`roles: [ ]`
			`clients: [ ]`
			`allowAnonymous: true`
			`allowAuthenticated: true`
			`AdminRole:`
			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`DatasetProfileManagerRole:`
			`roles:`
			`- DatasetProfileManager`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`ManagerRole:`
			`roles:`
			`- Manager`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`UserRole:`
			`roles:`
			`- User`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`AuthenticatedRole:`
			`roles: []`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: true`
			`AnonymousRole:`
			`roles: []`
			`clients: [ ]`
			`allowAnonymous: true`
			`allowAuthenticated: true`

			`######`


task #9088 Authorization model should be changed to be Permission based 2023-10-18 11:10:24 +02:00			`# Language`
			`BrowseLanguage:`
			`roles: [ ]`
			`clients: [ ]`
			`allowAnonymous: true`
			`allowAuthenticated: true`
			`EditLanguage:`
task #9088 Authorization model should be changed to be Permission based 2023-10-17 14:22:05 +02:00			`roles:`
			`- Admin`
			`clients: [ ]`
task #9088 Authorization model should be changed to be Permission based 2023-10-18 11:10:24 +02:00			`allowAnonymous: false`
			`allowAuthenticated: false`
			`# Statistics`
			`BrowseStatistics:`
			`roles: [ ]`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: true`
			`BrowsePublicStatistics:`
			`roles: [ ]`
			`clients: [ ]`
task #9088 Authorization model should be changed to be Permission based 2023-10-17 14:22:05 +02:00			`allowAnonymous: true`
task #9088 Authorization model should be changed to be Permission based 2023-10-18 11:10:24 +02:00			`allowAuthenticated: true`
Updating permissions.yml for dmps, entity_dois and descriptions 2023-10-25 15:55:10 +02:00			`# Description`
			`BrowseDescription:`
			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`EditDescription:`
			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`DeleteDescription:`
			`roles:`
			`- Admin`
			`claims: [ ]`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
task #9088 Authorization model should be changed to be Permission based 2023-10-18 11:10:24 +02:00			`# DescriptionTemplateType`
			`BrowseDescriptionTemplateType:`
			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
task #9088 Authorization model should be changed to be Permission based 2023-10-17 14:22:05 +02:00			`allowAuthenticated: false`
			`EditDescriptionTemplateType:`
			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`DeleteDescriptionTemplateType:`
			`roles:`
			`- Admin`
			`claims: [ ]`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
DescriptionTemplate refactor 2023-10-27 17:46:34 +02:00			`# DescriptionTemplate`
			`BrowseDescriptionTemplate:`
			`roles:`
			`- Admin`
DescriptionTemplate refactor 2023-10-30 14:07:59 +01:00			`- DatasetProfileManager`
DescriptionTemplate refactor 2023-10-27 17:46:34 +02:00			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`EditDescriptionTemplate:`
			`roles:`
			`- Admin`
DescriptionTemplate refactor 2023-10-30 14:07:59 +01:00			`- DatasetProfileManager`
DescriptionTemplate refactor 2023-10-27 17:46:34 +02:00			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`DeleteDescriptionTemplate:`
			`roles:`
			`- Admin`
DescriptionTemplate refactor 2023-10-30 14:07:59 +01:00			`- DatasetProfileManager`
DescriptionTemplate refactor 2023-10-27 17:46:34 +02:00			`claims: [ ]`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
DescriptionTemplate refactor 2023-11-01 11:03:23 +01:00			`CloneDescriptionTemplate:`
			`roles:`
			`- Admin`
			`- DatasetProfileManager`
			`claims: [ ]`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`CreateNewVersionDescriptionTemplate:`
			`roles:`
			`- Admin`
			`- DatasetProfileManager`
			`claims: [ ]`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
DescriptionTemplate refactor 2023-11-01 17:12:59 +01:00			`ImportDescriptionTemplate:`
			`roles:`
			`- Admin`
			`- DatasetProfileManager`
			`claims: [ ]`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
DescriptionTemplate refactor 2023-11-03 10:55:26 +01:00			`ExportDescriptionTemplate:`
			`roles:`
			`- Admin`
			`- DatasetProfileManager`
			`claims: [ ]`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
Updating permissions.yml for dmps, entity_dois and descriptions 2023-10-25 15:55:10 +02:00			`# Dmp`
			`BrowseDmp:`
			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`EditDmp:`
			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`DeleteDmp:`
			`roles:`
			`- Admin`
			`claims: [ ]`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
Adding new version service method for Dmps 2023-11-02 17:12:36 +01:00			`CreateNewVersionDmp:`
			`roles:`
			`- Admin`
			`claims: [ ]`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
DmpBlueprint refactor 2023-10-20 18:13:57 +02:00			`# DmpBlueprint`
			`BrowseDmpBlueprint:`
			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`EditDmpBlueprint:`
			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
DmpBlueprint refactor 2023-10-24 17:00:11 +02:00			`CloneDmpBlueprint:`
			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`ExportDmpBlueprint:`
			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`ImportDmpBlueprint:`
			`roles:`
			`- Admin`
			`claims: [ ]`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
DmpBlueprint refactor 2023-10-20 18:13:57 +02:00			`DeleteDmpBlueprint:`
			`roles:`
			`- Admin`
			`claims: [ ]`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
Updating permissions.yml for dmps, entity_dois and descriptions 2023-10-25 15:55:10 +02:00			`# EntityDoi`
			`BrowseEntityDoi:`
			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`EditEntityDoi:`
			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`DeleteEntityDoi:`
			`roles:`
			`- Admin`
			`claims: [ ]`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
task #9088 Authorization model should be changed to be Permission based 2023-10-17 14:22:05 +02:00
			`# ViewPage Permissions`
task #9088 Authorization model should be changed to be Permission based 2023-10-17 16:13:34 +02:00			`ViewDescriptionTemplateTypePage:`
task #9088 Authorization model should be changed to be Permission based 2023-10-17 14:22:05 +02:00			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
add ExternalReference, DmpExternalReference entities 2023-10-24 17:47:13 +02:00
rename External Reference to Reference 2023-10-26 13:38:18 +02:00			`# Reference Permissions`
			`BrowseReference:`
add ExternalReference, DmpExternalReference entities 2023-10-24 17:47:13 +02:00			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
rename External Reference to Reference 2023-10-26 13:38:18 +02:00			`EditReference:`
add ExternalReference, DmpExternalReference entities 2023-10-24 17:47:13 +02:00			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
rename External Reference to Reference 2023-10-26 13:38:18 +02:00			`DeleteReference:`
add ExternalReference, DmpExternalReference entities 2023-10-24 17:47:13 +02:00			`roles:`
			`- Admin`
			`claims: [ ]`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`

rename External Reference to Reference 2023-10-26 13:38:18 +02:00			`# DmpReference Permissions`
			`BrowseDmpReference:`
add ExternalReference, DmpExternalReference entities 2023-10-24 17:47:13 +02:00			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
rename External Reference to Reference 2023-10-26 13:38:18 +02:00			`EditDmpReference:`
add ExternalReference, DmpExternalReference entities 2023-10-24 17:47:13 +02:00			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
rename External Reference to Reference 2023-10-26 13:38:18 +02:00			`DeleteDmpReference:`
add ExternalReference, DmpExternalReference entities 2023-10-24 17:47:13 +02:00			`roles:`
			`- Admin`
			`claims: [ ]`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
Adding DescriptionReference entity stack (former Dataset*** entities) 2023-10-27 10:59:37 +02:00
			`# DescriptionReference Permissions`
			`BrowseDescriptionReference:`
			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`EditDescriptionReference:`
			`roles:`
			`- Admin`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`
			`DeleteDescriptionReference:`
			`roles:`
			`- Admin`
			`claims: [ ]`
			`clients: [ ]`
			`allowAnonymous: false`
			`allowAuthenticated: false`