Add read access to all models

2015-06-24 08:23:49 -07:00
parent 5bde1839f3
commit 62d2c40a87
6 changed files with 13 additions and 6 deletions
--- a/common/models/User-Identity.json
+++ b/common/models/User-Identity.json
@ -11,6 +11,13 @@
      "foreignKey": "userId"
    }
  },
-  "acls": [],
+  "acls": [
+    {
+      "accessType": "*",
+      "principalType": "ROLE",
+      "principalId": "$everyone",
+      "permission": "DENY"
+    }
+  ],
  "methods": []
 }
--- a/common/models/bonfire.json
+++ b/common/models/bonfire.json
@ -36,7 +36,7 @@
    {
      "accessType": "READ",
      "principalType": "ROLE",
-      "principalId": "$authenticated",
+      "principalId": "$everyone",
      "permission": "ALLOW"
    }
  ],
--- a/common/models/challenge.json
+++ b/common/models/challenge.json
@ -72,7 +72,7 @@
    {
      "accessType": "READ",
      "principalType": "ROLE",
-      "principalId": "$authenticated",
+      "principalId": "$everyone",
      "permission": "ALLOW"
    }
  ],
--- a/common/models/field-guide.json
+++ b/common/models/field-guide.json
@ -29,7 +29,7 @@
    {
      "accessType": "READ",
      "principalType": "ROLE",
-      "principalId": "$authenticated",
+      "principalId": "$everyone",
      "permission": "ALLOW"
    }
  ],
--- a/common/models/job.json
+++ b/common/models/job.json
@ -32,7 +32,7 @@
    {
      "accessType": "READ",
      "principalType": "ROLE",
-      "principalId": "$authenticated",
+      "principalId": "$everyone",
      "permission": "ALLOW"
    }
  ],
--- a/common/models/nonprofit.json
+++ b/common/models/nonprofit.json
@ -63,7 +63,7 @@
    {
      "accessType": "READ",
      "principalType": "ROLE",
-      "principalId": "$authenticated",
+      "principalId": "$everyone",
      "permission": "ALLOW"
    }
  ],