45 lines
1.1 KiB
Python
45 lines
1.1 KiB
Python
|
"""Platform-level Kairo capabilities."""
|
||
|
|
|
||
|
|
from __future__ import annotations
|
||
|
|
|
||
|
|
from rights_registry import CapabilityRegistration, register_capability
|
||
|
|
|
||
|
|
register_capability(
|
||
|
|
CapabilityRegistration(
|
||
|
|
key="kairo.admin.access",
|
||
|
|
module="platform",
|
||
|
|
description="Zugriff auf Portal-Administration und Admin-Endpunkte",
|
||
|
|
default_grants=(("portal", "admin"),),
|
||
|
|
)
|
||
|
|
)
|
||
|
|
|
||
|
|
register_capability(
|
||
|
|
CapabilityRegistration(
|
||
|
|
key="kairo.context.read",
|
||
|
|
module="platform",
|
||
|
|
description="TenantContext und Session-Kontext lesen",
|
||
|
|
default_grants=(
|
||
|
|
("portal", "admin"),
|
||
|
|
("portal", "user"),
|
||
|
|
("tenant", "owner"),
|
||
|
|
("tenant", "admin"),
|
||
|
|
("tenant", "member"),
|
||
|
|
),
|
||
|
|
)
|
||
|
|
)
|
||
|
|
|
||
|
|
register_capability(
|
||
|
|
CapabilityRegistration(
|
||
|
|
key="kairo.entitlements.read",
|
||
|
|
module="platform",
|
||
|
|
description="Entitlements-Snapshot lesen",
|
||
|
|
default_grants=(
|
||
|
|
("portal", "admin"),
|
||
|
|
("portal", "user"),
|
||
|
|
("tenant", "owner"),
|
||
|
|
("tenant", "admin"),
|
||
|
|
("tenant", "member"),
|
||
|
|
),
|
||
|
|
)
|
||
|
|
)
|