permissions:
  extendedClaims: [ ]
  policies:
    ###### Should Remove after Refactor
    PublicRole:
      roles: [ ]
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    AdminRole:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DatasetProfileManagerRole:
      roles:
        - DatasetProfileManager
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    ManagerRole:
      roles:
        - Manager
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    UserRole:
      roles:
        - User
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    AuthenticatedRole:
      roles: []
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: true
    AnonymousRole:
      roles: []
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    
    ###### 
    
    # public
    PublicBrowseDescription:
      roles: [ ]
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    PublicBrowseDescriptionTemplate:
      roles: [ ]
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    PublicBrowseDmp:
      roles: [ ]
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    PublicBrowseDmpReference:
      roles: [ ]
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    PublicBrowseDmpUser:
      roles: [ ]
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    PublicBrowseReference:
      roles: [ ]
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    PublicBrowseUser:
      roles: [ ]
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
      
    # Elastic
    ManageElastic:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    
    # Language
    BrowseLanguage:
      roles: [ ]
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    EditLanguage:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # Statistics
    BrowseStatistics:
      roles: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: true
    BrowsePublicStatistics:
      roles: [ ]
      clients: [ ]
      allowAnonymous: true
      allowAuthenticated: true
    # Description
    BrowseDescription:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDescription:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDescription:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    CloneDescription:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    
    # Tag
    BrowseTag:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditTag:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteTag:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # User
    BrowseUser:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditUser:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteUser:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false    
    ExportUsers:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # DescriptionTemplateType
    BrowseDescriptionTemplateType:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDescriptionTemplateType:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDescriptionTemplateType:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # DescriptionTemplate
    BrowseDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    CloneDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    CreateNewVersionDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    ImportDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    ExportDescriptionTemplate:
      roles:
        - Admin
        - DatasetProfileManager
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # Dmp
    BrowseDmp:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDmp:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDmp:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    CloneDmp:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    CreateNewVersionDmp:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    ExportDmp:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    FinalizeDmp:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    AssignDmpUsers:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # DmpBlueprint
    BrowseDmpBlueprint:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDmpBlueprint:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    CloneDmpBlueprint:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    ExportDmpBlueprint:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    ImportDmpBlueprint:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDmpBlueprint:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    # EntityDoi
    BrowseEntityDoi:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditEntityDoi:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteEntityDoi:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false

    # ViewPage Permissions
    ViewDescriptionTemplateTypePage:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false

    # Reference Permissions
    BrowseReference:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditReference:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteReference:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false

    # DmpReference Permissions
    BrowseDmpReference:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditDmpReference:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteDmpReference:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false

      # DmpUser Permissions
      BrowseDmpUser:
        roles:
          - Admin
        clients: [ ]
        allowAnonymous: false
        allowAuthenticated: false
      EditDmpUser:
        roles:
          - Admin
        clients: [ ]
        allowAnonymous: false
        allowAuthenticated: false
      DeleteDmpUser:
        roles:
          - Admin
        claims: [ ]
        clients: [ ]
        allowAnonymous: false
        allowAuthenticated: false

    # SupportiveMaterial Permissions
    BrowseSupportiveMaterial:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: yes
      allowAuthenticated: yes
    EditSupportiveMaterial:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteSupportiveMaterial:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false

    # ReferenceType Permissions
    BrowseReferenceType:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    EditReferenceType:
      roles:
        - Admin
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false
    DeleteReferenceType:
      roles:
        - Admin
      claims: [ ]
      clients: [ ]
      allowAnonymous: false
      allowAuthenticated: false


      # DmpDescriptionTemplate Permissions
      BrowseDmpDescriptionTemplate:
        roles:
          - Admin
        clients: [ ]
        allowAnonymous: false
        allowAuthenticated: false
      EditDmpDescriptionTemplate:
        roles:
          - Admin
        clients: [ ]
        allowAnonymous: false
        allowAuthenticated: false
      DeleteDmpDescriptionTemplate:
        roles:
          - Admin
        claims: [ ]
        clients: [ ]
        allowAnonymous: false
        allowAuthenticated: false

      # DescriptionReference Permissions
      BrowseDescriptionReference:
        roles:
          - Admin
        clients: [ ]
        allowAnonymous: false
        allowAuthenticated: false
      EditDescriptionReference:
        roles:
          - Admin
        clients: [ ]
        allowAnonymous: false
        allowAuthenticated: false
      DeleteDescriptionReference:
        roles:
          - Admin
        claims: [ ]
        clients: [ ]
        allowAnonymous: false
        allowAuthenticated: false