ACLs

2017-05-18 17:54:23 +02:00 · 2017-05-18 17:54:23 +02:00 · 72415ebeb2
parent c4cb0906ad
commit 72415ebeb2
6 changed files with 30 additions and 6 deletions
--- a/services/client/common/models/Account.json
+++ b/services/client/common/models/Account.json
@ -19,8 +19,14 @@
    {
      "accessType": "*",
      "principalType": "ROLE",
-      "principalId": "$everyone",
+      "principalId": "$authenticated",
      "permission": "ALLOW"
+    },
+    {
+      "accessType": "*",
+      "principalType": "ROLE",
+      "principalId": "$everyone",
+      "permission": "DENY"
    }
  ]
 }
--- a/services/client/common/models/Address.json
+++ b/services/client/common/models/Address.json
@ -64,8 +64,14 @@
    {
      "accessType": "*",
      "principalType": "ROLE",
-      "principalId": "$everyone",
+      "principalId": "$authenticated",
      "permission": "ALLOW"
+    },
+    {
+      "accessType": "*",
+      "principalType": "ROLE",
+      "principalId": "$everyone",
+      "permission": "DENY"
    }
  ]
 }
--- a/services/client/common/models/Client.json
+++ b/services/client/common/models/Client.json
@ -98,7 +98,6 @@
      "type": "date"
    }
  },
-  "validations": [],
  "relations": {
    "account": {
      "type": "belongsTo",
@ -155,5 +154,6 @@
      "permission": "DENY"
    }
  ],
+  "validations": [],
  "methods": {}
 }
--- a/services/client/common/models/ClientObservation.json
+++ b/services/client/common/models/ClientObservation.json
@ -37,8 +37,14 @@
    {
      "accessType": "*",
      "principalType": "ROLE",
-      "principalId": "$everyone",
+      "principalId": "$authenticated",
      "permission": "ALLOW"
+    },
+    {
+      "accessType": "*",
+      "principalType": "ROLE",
+      "principalId": "$everyone",
+      "permission": "DENY"
    }
  ],
  "scope": {
--- a/services/client/common/models/ContactChannel.json
+++ b/services/client/common/models/ContactChannel.json
@ -18,7 +18,7 @@
      "accessType": "*",
      "principalType": "ROLE",
      "principalId": "$everyone",
-      "permission": "ALLOW"
+      "permission": "DENY"
    }
  ]
 }
--- a/services/client/common/models/Employee.json
+++ b/services/client/common/models/Employee.json
@ -24,8 +24,14 @@
    {
      "accessType": "*",
      "principalType": "ROLE",
-      "principalId": "$everyone",
+      "principalId": "$authenticated",
      "permission": "ALLOW"
+    },
+    {
+      "accessType": "*",
+      "principalType": "ROLE",
+      "principalId": "$everyone",
+      "permission": "DENY"
    }
  ]
 }