permissions:
  extendedClaims: [ ]
  policies:
    ###### Should Remove after Refactor
    PublicRole:
      roles: [ ]
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    AdminRole:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DatasetProfileManagerRole:
      roles:
        - DatasetProfileManager
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    ManagerRole:
      roles:
        - Manager
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    UserRole:
      roles:
        - User
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    AuthenticatedRole:
      roles: []
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: true
    AnonymousRole:
      roles: []
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    
    ###### 
    
    
    # Language
    BrowseLanguage:
      roles: [ ]
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    EditLanguage:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # Statistics
    BrowseStatistics:
      roles: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: true
    BrowsePublicStatistics:
      roles: [ ]
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    # Description
    BrowseDescription:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDescription:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDescription:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # DescriptionTemplateType
    BrowseDescriptionTemplateType:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDescriptionTemplateType:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDescriptionTemplateType:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # DescriptionTemplate
    BrowseDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    CloneDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    CreateNewVersionDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    ImportDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # Dmp
    BrowseDmp:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDmp:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDmp:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # DmpBlueprint
    BrowseDmpBlueprint:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDmpBlueprint:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    CloneDmpBlueprint:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    ExportDmpBlueprint:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    ImportDmpBlueprint:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDmpBlueprint:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # EntityDoi
    BrowseEntityDoi:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditEntityDoi:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteEntityDoi:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false

    # ViewPage Permissions
    ViewDescriptionTemplateTypePage:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false

    # Reference Permissions
    BrowseReference:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditReference:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteReference:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false

    # DmpReference Permissions
    BrowseDmpReference:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDmpReference:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDmpReference:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false

      # DescriptionReference Permissions
      BrowseDescriptionReference:
        roles:
          - Admin
        clients: [ ]
        allowAnonymous: false
        allowAuthenticated: false
      EditDescriptionReference:
        roles:
          - Admin
        clients: [ ]
        allowAnonymous: false
        allowAuthenticated: false
      DeleteDescriptionReference:
        roles:
          - Admin
        claims: [ ]
        clients: [ ]
        allowAnonymous: false
        allowAuthenticated: false