# Authenticated User role: logged in via Authentik
name: authenticated-user
description: Logged in user with access to all public + private docs

rules:
  # Can read all wiki, embeddings, skills (including private)
  - resources: [wiki, embedding, skill]
    verbs: [read, query]
    # No visibility restriction - can see public AND private

  # Can manage own conversations (any project)
  - resources: [conversation]
    verbs: [read, write, delete]
    scope:
      owner: self