Merge pull request #77 from linuxfoundation/andrest50/meeting-attachments

[LFXV2-707] Update authorization model for OpenFGA to include meeting and past meeting attachment types

Author: andrest50

charts/lfx-platform/templates/openfga/model.yaml

@@ -19,9 +19,9 @@ spec:
     - patch: Modifications of define
 */}}
     - version:
-        major: 5
-        minor: 3
-        patch: 2
+        major: 6
+        minor: 0
+        patch: 0
       authorizationModel: |
         model
           schema 1.1
@@ -98,7 +98,16 @@ spec:
             # only certain privileged users can view it.
             define viewer: [user:*] or participant or organizer or auditor
 
-          type past_meeting
+        # The meeting_attachment type identifies an attachment of a meeting.
+        type meeting_attachment
+          relations
+            define meeting: [meeting]
+            define writer: organizer from meeting
+            define auditor: writer or auditor from meeting
+            define participant: participant from meeting
+            define viewer: [user:*] or participant or writer or auditor
+
+        type past_meeting
           relations
             define project: [project]
             define committee: [committee]
@@ -122,12 +131,21 @@ spec:
             # only certain privileged users can view it.
             define viewer: [user:*] or attendee or invitee or organizer or auditor
 
-          # The past_meeting_recording type identifies a recording of a past meeting.
-          # Access to a recording is limited to one of the following groups:
-          # - Only meeting hosts
-          # - Only meeting participants
-          # - Public (anyone)
-          type past_meeting_recording
+        # The past_meeting_attachment type identifies an attachment of a past meeting.
+        type past_meeting_attachment
+          relations
+            define past_meeting: [past_meeting]
+            define writer: organizer from past_meeting
+            define auditor: writer or auditor from past_meeting
+            define participant: host from past_meeting or invitee from past_meeting or attendee from past_meeting
+            define viewer: [user:*] or participant or writer or auditor
+
+        # The past_meeting_recording type identifies a recording of a past meeting.
+        # Access to a recording is limited to one of the following groups:
+        # - Only meeting hosts
+        # - Only meeting participants
+        # - Public (anyone)
+        type past_meeting_recording
           relations
             define past_meeting: [past_meeting]
             define writer: organizer from past_meeting
@@ -145,12 +163,12 @@ spec:
             # to view the recording.
             define viewer: [user:*] or writer or auditor
 
-          # The past_meeting_transcript type identifies a transcript of a past meeting.
-          # Access to a transcript is limited to one of the following groups:
-          # - Only meeting hosts
-          # - Only meeting participants
-          # - Public (anyone)
-          type past_meeting_transcript
+        # The past_meeting_transcript type identifies a transcript of a past meeting.
+        # Access to a transcript is limited to one of the following groups:
+        # - Only meeting hosts
+        # - Only meeting participants
+        # - Public (anyone)
+        type past_meeting_transcript
           relations
             define past_meeting: [past_meeting]
             define writer: organizer from past_meeting
@@ -168,12 +186,12 @@ spec:
             # to view the transcript.
             define viewer: [user:*] or writer or auditor
 
-          # The past_meeting_summary type identifies a summary of a past meeting.
-          # Access to a summary is limited to one of the following groups:
-          # - Only meeting hosts
-          # - Only meeting participants
-          # - Public (anyone)
-          type past_meeting_summary
+        # The past_meeting_summary type identifies a summary of a past meeting.
+        # Access to a summary is limited to one of the following groups:
+        # - Only meeting hosts
+        # - Only meeting participants
+        # - Public (anyone)
+        type past_meeting_summary
           relations
             define past_meeting: [past_meeting]
             define writer: organizer from past_meeting