Kairo-Jinkendo/backend/rights_registrations/operating_model_ops.py

"""Operating model capabilities (AP0.8)."""

from __future__ import annotations

from rights_registry import CapabilityRegistration, register_capability

_MEMBER_READ = (
    ("portal", "admin"),
    ("portal", "user"),
    ("tenant", "owner"),
    ("tenant", "admin"),
    ("tenant", "member"),
)

_MEMBER_MANAGE = (
    ("portal", "admin"),
    ("tenant", "owner"),
    ("tenant", "admin"),
    ("tenant", "member"),
)

register_capability(
    CapabilityRegistration(
        key="kairo.attention.read",
        module="attention",
        description="Attention- und NextAction-Sichten lesen",
        default_grants=_MEMBER_READ,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.blocker.read",
        module="blocker",
        description="Blocker im aktiven Tenant lesen",
        default_grants=_MEMBER_READ,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.blocker.manage",
        module="blocker",
        description="Blocker anlegen und bearbeiten",
        default_grants=_MEMBER_MANAGE,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.backlog.read",
        module="backlog",
        description="Backlog-Items im aktiven Tenant lesen",
        default_grants=_MEMBER_READ,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.backlog.manage",
        module="backlog",
        description="Backlog-Items anlegen, bearbeiten und konvertieren",
        default_grants=_MEMBER_MANAGE,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.milestone.read",
        module="milestone",
        description="Meilensteine im aktiven Tenant lesen",
        default_grants=_MEMBER_READ,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.milestone.manage",
        module="milestone",
        description="Meilensteine anlegen und bearbeiten",
        default_grants=_MEMBER_MANAGE,
    )
)