16 lines
481 B
YAML
16 lines
481 B
YAML
|
# Authenticated User role: logged in via Authentik
|
||
|
|
name: authenticated-user
|
||
|
|
description: Logged in user with access to all public + private docs
|
||
|
|
|
||
|
|
rules:
|
||
|
|
# Can read all wiki, embeddings, skills (including private)
|
||
|
|
- resources: [wiki, embedding, skill]
|
||
|
|
verbs: [read, query]
|
||
|
|
# No visibility restriction - can see public AND private
|
||
|
|
|
||
|
|
# Can manage own conversations (any project)
|
||
|
|
- resources: [conversation]
|
||
|
|
verbs: [read, write, delete]
|
||
|
|
scope:
|
||
|
|
owner: self
|