aboutsummaryrefslogtreecommitdiff
path: root/backend/seckelapi/config/security.toml
diff options
context:
space:
mode:
Diffstat (limited to 'backend/seckelapi/config/security.toml')
-rw-r--r--backend/seckelapi/config/security.toml19
1 files changed, 19 insertions, 0 deletions
diff --git a/backend/seckelapi/config/security.toml b/backend/seckelapi/config/security.toml
index f72b765..4bf05b3 100644
--- a/backend/seckelapi/config/security.toml
+++ b/backend/seckelapi/config/security.toml
@@ -207,4 +207,23 @@ max_limit = 50
max_where_conditions = 5
user_settings_access = "read-own-only" # Students can only read their own preferences, not modify
+[permissions."10"]
+# Kiosk - public terminal, can only list users for login
+rollback_on_error = true
+allow_batch_operations = false
+basic_rules = [
+ "users:r",
+ "roles:r"
+]
+advanced_rules = [
+ "users.*:block",
+ "users.id:r",
+ "users.username:r",
+ "users.name:r",
+ "users.role_id:r"
+]
+max_limit = 100
+max_where_conditions = 5
+user_settings_access = "read-own-only"
+