From eb0de41c022d2893adbaa9d4407ddb92e8a9451e Mon Sep 17 00:00:00 2001
From: Christian Himpe <christian.himpe@wwu.de>
Date: Sat, 1 Apr 2023 12:25:13 +0200
Subject: [PATCH] Added appendonly group example

---
 src/main/asciidoc/security/groups.adoc | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/src/main/asciidoc/security/groups.adoc b/src/main/asciidoc/security/groups.adoc
index f8d88ed6..1be72e9a 100644
--- a/src/main/asciidoc/security/groups.adoc
+++ b/src/main/asciidoc/security/groups.adoc
@@ -90,6 +90,27 @@ The default settings for the `admin` group are:
 
 Which allows to execute any operation against the security, the schema and records.
 
+Here is an example for an append-only group:
+
+```json
+"appendonly": {
+  "access": [],
+  "resultSetLimit": -1,
+  "readTimeout": -1,
+  "types": {
+    "*": {
+      "access": [
+        "createRecord",
+        "readRecord"
+      ]
+    }
+  }
+}
+```
+
+Which allows the group members to read and create, but not to update or delete records.
+Such a group can be useful for ledgers, block chains, or data provenance.
+
 You can use any JSON editor to edit the file `config/server-groups.json`.
 It's recommended to keep a copy of the current file before editing the groups.
 In this way if there are any errors, it's easy to restore the previous file.