Lars
910b1d7e07
Some checks failed
Deploy Development / deploy (push) Successful in 33s
Test Suite / pytest-backend (push) Failing after 4s
Test Suite / k6 /api/health Baseline (push) Has been skipped
Test Suite / playwright-smoke (push) Has been skipped
Test Suite / lint-backend (push) Successful in 1s
Test Suite / compose-smoke (push) Has been skipped
Co-authored-by: Cursor <cursoragent@cursor.com>
45 lines
1.1 KiB
Python
45 lines
1.1 KiB
Python
"""Platform-level Kairo capabilities."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from rights_registry import CapabilityRegistration, register_capability
|
|
|
|
register_capability(
|
|
CapabilityRegistration(
|
|
key="kairo.admin.access",
|
|
module="platform",
|
|
description="Zugriff auf Portal-Administration und Admin-Endpunkte",
|
|
default_grants=(("portal", "admin"),),
|
|
)
|
|
)
|
|
|
|
register_capability(
|
|
CapabilityRegistration(
|
|
key="kairo.context.read",
|
|
module="platform",
|
|
description="TenantContext und Session-Kontext lesen",
|
|
default_grants=(
|
|
("portal", "admin"),
|
|
("portal", "user"),
|
|
("tenant", "owner"),
|
|
("tenant", "admin"),
|
|
("tenant", "member"),
|
|
),
|
|
)
|
|
)
|
|
|
|
register_capability(
|
|
CapabilityRegistration(
|
|
key="kairo.entitlements.read",
|
|
module="platform",
|
|
description="Entitlements-Snapshot lesen",
|
|
default_grants=(
|
|
("portal", "admin"),
|
|
("portal", "user"),
|
|
("tenant", "owner"),
|
|
("tenant", "admin"),
|
|
("tenant", "member"),
|
|
),
|
|
)
|
|
)
|