From cf0f623bd64a857c69e57e7b55c4136cd1956895 Mon Sep 17 00:00:00 2001
From: Timo Bejan <timo.bejan.ext@knecon.com>
Date: Tue, 5 Sep 2023 18:24:22 +0300
Subject: [PATCH] taas permissions

---
 src/main/resources/application-taas.yaml | 42 +++++++++++++++++++-----
 1 file changed, 33 insertions(+), 9 deletions(-)

diff --git a/src/main/resources/application-taas.yaml b/src/main/resources/application-taas.yaml
index 79baad4..f294b0d 100644
--- a/src/main/resources/application-taas.yaml
+++ b/src/main/resources/application-taas.yaml
@@ -6,11 +6,31 @@ fforesight:
     accessTokenLifeSpan: 3600
     ssoSessionIdleTimeout: 86400
     realm: master
-    default-theme: 'taas'
+    default-theme: 'clarifynd'
     valid-redirect-uris: [ '/taas-search/*','/tenant-user-management/*','http://localhost:4200/*', 'http://localhost:4300/*', '/ui/*' ,'/auth/*','/taas-persistence/*' ]
     kc-role-mapping:
       roles:
-        - name: SUPER_USER
+        - name: FF_USER
+          set-by-default: true
+          rank: 100
+          permissions:
+            - 'fforesight-read-general-configuration'
+            - 'fforesight-manage-user-preferences'
+            - 'fforesight-read-users'
+            - 'fforesight-read-all-users'
+            - 'fforesight-update-my-profile'
+            - 'fforesight-get-tenants'
+            - 'fforesight-deployment-info'
+            - 'fforesight-read-smtp-configuration'
+            - 'fforesight-search'
+            - 'fforesight-view-document'
+            - 'fforesight-user-upload-files'
+            - 'fforesight-user-manage-files'
+            - 'fforesight-user-view-files'
+            - 'fforesight-user-manage-analysis'
+            - 'fforesight-user-view-analysis'
+            - 'fforesight-download-file'
+        - name: FF_ADMIN
           set-by-default: true
           rank: 100
           permissions:
@@ -28,13 +48,17 @@ fforesight:
             - 'fforesight-write-smtp-configuration'
             - 'fforesight-search'
             - 'fforesight-view-document'
-            - 'fforesight-upload-files'
-            - 'fforesight-delete-files'
-            - 'fforesight-manage-files'
-            - 'fforesight-view-files'
-            - 'fforesight-view-internal-file-data'
-            - 'fforesight-view-analysis-data'
-            - 'fforesight-trigger-analysis'
+            - 'fforesight-user-upload-files'
+            - 'fforesight-user-manage-files'
+            - 'fforesight-user-view-files'
+            - 'fforesight-user-manage-analysis'
+            - 'fforesight-user-view-analysis'
+            - 'fforesight-system-upload-files'
+            - 'fforesight-system-manage-files'
+            - 'fforesight-system-view-files'
+            - 'fforesight-system-manage-analysis'
+            - 'fforesight-system-view-analysis'
+            - 'fforesight-download-file'
             - 'taas-bdr-connector-view-tasks'
             - 'taas-bdr-connector-start-task'
             - 'taas-bdr-connector-stop-task'