Skip to content
Merged
Show file tree
Hide file tree
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion charts/lfx-platform/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ apiVersion: v2
name: lfx-platform
description: LFX Platform v2 Helm chart
type: application
version: 0.3.5
version: 0.3.6
icon: https://github.com/linuxfoundation/lfx-v2-helm/raw/main/img/lfx-logo-color.svg
dependencies:
- name: traefik
Expand Down
78 changes: 72 additions & 6 deletions charts/lfx-platform/templates/openfga/model.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -19,9 +19,9 @@ spec:
- patch: Modifications of define
*/}}
- version:
major: 5
minor: 3
patch: 2
major: 6
minor: 0
patch: 1
authorizationModel: |
model
schema 1.1
Expand Down Expand Up @@ -143,7 +143,7 @@ spec:
# should be able to view the recording.
# If it is set to only meeting hosts, then only the meeting hosts should be able
# to view the recording.
define viewer: [user:*] or writer or auditor
define viewer: [user, user:*] or writer or auditor

# The past_meeting_transcript type identifies a transcript of a past meeting.
# Access to a transcript is limited to one of the following groups:
Expand All @@ -166,7 +166,7 @@ spec:
# should be able to view the transcript.
# If it is set to only meeting hosts, then only the meeting hosts should be able
# to view the transcript.
define viewer: [user:*] or writer or auditor
define viewer: [user, user:*] or writer or auditor

# The past_meeting_summary type identifies a summary of a past meeting.
# Access to a summary is limited to one of the following groups:
Expand All @@ -189,5 +189,71 @@ spec:
# should be able to view the summary.
# If it is set to only meeting hosts, then only the meeting hosts should be able
# to view the summary.
define viewer: [user:*] or writer or auditor
define viewer: [user, user:*] or writer or auditor

# The following v1 meeting types support read-only, indexer-only data
# being synced from LFX v1. At this time, they are *distinct types*
# from the main types above. This encapsulation will make it easier to
# eventually sunset all such v1 tuples when the data is migrated into
# the core data models (as this will result in new UUIDs, new relations
# would have been needed, even if the relation names had been reused
# for the v1 entities).
#
# *All relations are as described in `meeting`, unless otherwise
# noted.*
type v1_meeting
relations
define project: [project]
define committee: [committee]
define auditor: organizer or auditor from project
# No explicit [user] relation for organizer in v1.
define organizer: meeting_coordinator from project or writer from committee or writer from project
define host: [user] or organizer
define participant: [user] or host
define viewer: [user:*] or participant or organizer or auditor

# *All relations are as described in `past_meeting`, unless otherwise noted.*
type v1_past_meeting
relations
define project: [project]
define committee: [committee]
define meeting: [v1_meeting]
define auditor: organizer or auditor from project or auditor from meeting
# No explicit [user] relation for organizer in v1.
define organizer: meeting_coordinator from project or writer from project or organizer
define host: [user] or organizer
define invitee: [user]
define attendee: [user]
define viewer: [user:*] or attendee or invitee or organizer or auditor

# *All relations are as described in `past_meeting_recording`, unless
# otherwise noted.*
type v1_past_meeting_recording
relations
define past_meeting: [v1_past_meeting]
define writer: organizer from past_meeting
define auditor: auditor from past_meeting
define host: host from past_meeting
define participant: invitee from past_meeting or attendee from past_meeting
define viewer: [user, user:*] or writer or auditor

# *All relations are as described in `past_meeting_transcript`, unless
# otherwise noted.*
type v1_past_meeting_transcript
relations
define past_meeting: [v1_past_meeting]
define writer: organizer from past_meeting
define auditor: auditor from past_meeting
define host: host from past_meeting
define participant: invitee from past_meeting or attendee from past_meeting
define viewer: [user, user:*] or writer or auditor

type v1_past_meeting_summary
relations
define past_meeting: [v1_past_meeting]
define writer: organizer from past_meeting
define auditor: auditor from past_meeting
define host: host from past_meeting
define participant: invitee from past_meeting or attendee from past_meeting
define viewer: [user, user:*] or writer or auditor
{{- end }}