From 93317bd021075f2f541b667e51802d7964169a46 Mon Sep 17 00:00:00 2001
From: UMTS at Teleco <crt@teleco.ch>
Date: Mon, 22 Dec 2025 11:06:06 +0100
Subject: item replacement and relationships db update

---
 backend/seckelapi/config/security.toml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

(limited to 'backend/seckelapi/config/security.toml')

diff --git a/backend/seckelapi/config/security.toml b/backend/seckelapi/config/security.toml
index f72b765..4bf05b3 100644
--- a/backend/seckelapi/config/security.toml
+++ b/backend/seckelapi/config/security.toml
@@ -207,4 +207,23 @@ max_limit = 50
 max_where_conditions = 5
 user_settings_access = "read-own-only"  # Students can only read their own preferences, not modify
 
+[permissions."10"]
+# Kiosk - public terminal, can only list users for login
+rollback_on_error = true
+allow_batch_operations = false
+basic_rules = [
+    "users:r",
+    "roles:r"
+]
+advanced_rules = [
+    "users.*:block",
+    "users.id:r",
+    "users.username:r",
+    "users.name:r",
+    "users.role_id:r"
+]
+max_limit = 100
+max_where_conditions = 5
+user_settings_access = "read-own-only"
+
 
-- 
cgit v1.2.3-70-g09d2