diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 6ce2d597d7..07d763badd 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -41,6 +41,9 @@ jobs: - name: Checkout repository uses: actions/checkout@v2 + - name: Clone Vitro + run: git clone https://github.com/vivo-project/Vitro.git ../Vitro + # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL uses: github/codeql-action/init@v2 diff --git a/api/src/main/java/edu/cornell/mannlib/vitro/webapp/edit/n3editing/configuration/generators/ManageLabelsForPersonGenerator.java b/api/src/main/java/edu/cornell/mannlib/vitro/webapp/edit/n3editing/configuration/generators/ManageLabelsForPersonGenerator.java index 71021264d6..e69ec98fee 100644 --- a/api/src/main/java/edu/cornell/mannlib/vitro/webapp/edit/n3editing/configuration/generators/ManageLabelsForPersonGenerator.java +++ b/api/src/main/java/edu/cornell/mannlib/vitro/webapp/edit/n3editing/configuration/generators/ManageLabelsForPersonGenerator.java @@ -1,9 +1,9 @@ /* $This file is distributed under the terms of the license in LICENSE$ */ package edu.cornell.mannlib.vitro.webapp.edit.n3editing.configuration.generators; -import static edu.cornell.mannlib.vitro.webapp.auth.requestedAction.RequestedAction.SOME_LITERAL; -import static edu.cornell.mannlib.vitro.webapp.auth.requestedAction.RequestedAction.SOME_PREDICATE; -import static edu.cornell.mannlib.vitro.webapp.auth.requestedAction.RequestedAction.SOME_URI; +import static edu.cornell.mannlib.vitro.webapp.auth.objects.AccessObject.SOME_LITERAL; +import static edu.cornell.mannlib.vitro.webapp.auth.objects.AccessObject.SOME_PREDICATE; +import static edu.cornell.mannlib.vitro.webapp.auth.objects.AccessObject.SOME_URI; import java.io.FileNotFoundException; import java.util.ArrayList; @@ -27,9 +27,12 @@ import org.apache.jena.query.ResultSet; import org.apache.jena.rdf.model.Literal; +import edu.cornell.mannlib.vitro.webapp.auth.attributes.AccessOperation; +import edu.cornell.mannlib.vitro.webapp.auth.objects.DataPropertyStatementAccessObject; +import edu.cornell.mannlib.vitro.webapp.auth.objects.ObjectPropertyStatementAccessObject; import edu.cornell.mannlib.vitro.webapp.auth.policy.PolicyHelper; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.propstmt.AddDataPropertyStatement; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.propstmt.AddObjectPropertyStatement; +import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.AuthorizationRequest; +import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.SimpleAuthorizationRequest; import edu.cornell.mannlib.vitro.webapp.beans.Individual; import edu.cornell.mannlib.vitro.webapp.beans.Property; import edu.cornell.mannlib.vitro.webapp.beans.VClass; @@ -331,14 +334,14 @@ public int compare(HashMap h1, HashMap h2) { private Object isEditable(VitroRequest vreq, EditConfigurationVTwo config) { Individual individual = EditConfigurationUtils.getIndividual(vreq, config.getSubjectUri()); - AddDataPropertyStatement adps = new AddDataPropertyStatement( + DataPropertyStatementAccessObject dpsAccessObject = new DataPropertyStatementAccessObject( vreq.getJenaOntModel(), individual.getURI(), SOME_URI, SOME_LITERAL); - AddObjectPropertyStatement aops = new AddObjectPropertyStatement( + ObjectPropertyStatementAccessObject aops = new ObjectPropertyStatementAccessObject( vreq.getJenaOntModel(), individual.getURI(), SOME_PREDICATE, SOME_URI); - return PolicyHelper.isAuthorizedForActions(vreq, adps.or(aops)); + return PolicyHelper.isAuthorizedForActions(vreq, AuthorizationRequest.or(new SimpleAuthorizationRequest(dpsAccessObject, AccessOperation.ADD), new SimpleAuthorizationRequest(aops, AccessOperation.ADD))); } diff --git a/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/AdvisingRelationshipChecker.java b/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/AdvisingRelationshipChecker.java deleted file mode 100644 index ee091d7479..0000000000 --- a/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/AdvisingRelationshipChecker.java +++ /dev/null @@ -1,58 +0,0 @@ -/* $This file is distributed under the terms of the license in LICENSE$ */ - -package edu.cornell.mannlib.vivo.auth.policy; - -import java.util.List; - -import edu.cornell.mannlib.vitro.webapp.auth.policy.ifaces.PolicyDecision; -import edu.cornell.mannlib.vitro.webapp.auth.policy.specialrelationships.RelationshipChecker; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.propstmt.AbstractPropertyStatementAction; - -/** - * Does the requested action involve a change to an Advising Relationship that - * the self-editor is authorized to modify? - */ -public class AdvisingRelationshipChecker extends RelationshipChecker { - private static final String URI_ADVISING_RELATIONSHIP_TYPE = NS_CORE - + "AdvisingRelationship"; - private static final String URI_ADVISOR_ROLE = NS_CORE + "AdvisorRole"; - - private final String[] resourceUris; - - public AdvisingRelationshipChecker(AbstractPropertyStatementAction action) { - super(action.getOntModel()); - this.resourceUris = action.getResourceUris(); - } - - /** - * A self-editor is authorized to add, edit, or delete a statement if the - * subject or object refers to an Advising Relationship, and if the - * self-editor: - * - * 1) is an Advisor in that Relationship - */ - public PolicyDecision isAuthorized(List userUris) { - for (String resourceUri : resourceUris) { - if (isAdvisingRelationship(resourceUri)) { - if (anyUrisInCommon(userUris, getUrisOfAdvisors(resourceUri))) { - return authorizedAdvisor(resourceUri); - } - } - } - return null; - } - - private boolean isAdvisingRelationship(String resourceUri) { - return isResourceOfType(resourceUri, URI_ADVISING_RELATIONSHIP_TYPE); - } - - private List getUrisOfAdvisors(String resourceUri) { - return getObjectsThroughLinkingNode(resourceUri, URI_RELATES, - URI_ADVISOR_ROLE, URI_INHERES_IN); - } - - private PolicyDecision authorizedAdvisor(String resourceUri) { - return authorizedDecision("User is an Advisor of " + resourceUri); - } - -} diff --git a/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/CourseChecker.java b/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/CourseChecker.java deleted file mode 100644 index 1510ced02f..0000000000 --- a/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/CourseChecker.java +++ /dev/null @@ -1,56 +0,0 @@ -/* $This file is distributed under the terms of the license in LICENSE$ */ - -package edu.cornell.mannlib.vivo.auth.policy; - -import java.util.List; - -import edu.cornell.mannlib.vitro.webapp.auth.policy.ifaces.PolicyDecision; -import edu.cornell.mannlib.vitro.webapp.auth.policy.specialrelationships.RelationshipChecker; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.propstmt.AbstractPropertyStatementAction; - -/** - * Does the requested action involve a change to a Course that the self-editor - * is authorized to modify? - */ -public class CourseChecker extends RelationshipChecker { - private static final String URI_COURSE_TYPE = NS_CORE + "Course"; - private static final String URI_TEACHER_ROLE_TYPE = NS_CORE + "TeacherRole"; - - private final String[] resourceUris; - - public CourseChecker(AbstractPropertyStatementAction action) { - super(action.getOntModel()); - this.resourceUris = action.getResourceUris(); - } - - /** - * A self-editor is authorized to add, edit, or delete a statement if the - * subject or object refers to a Course, and if the self-editor: - * - * 1) is a Teacher of that Course - */ - public PolicyDecision isAuthorized(List userUris) { - for (String resourceUri : resourceUris) { - if (isCourse(resourceUri)) { - if (anyUrisInCommon(userUris, getUrisOfTeachers(resourceUri))) { - return authorizedTeacher(resourceUri); - } - } - } - return null; - } - - private boolean isCourse(String resourceUri) { - return isResourceOfType(resourceUri, URI_COURSE_TYPE); - } - - private List getUrisOfTeachers(String resourceUri) { - return getObjectsThroughLinkingNode(resourceUri, URI_REALIZES, - URI_TEACHER_ROLE_TYPE, URI_INHERES_IN); - } - - private PolicyDecision authorizedTeacher(String resourceUri) { - return authorizedDecision("User is a Teacher of " + resourceUri); - } - -} diff --git a/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/GrantChecker.java b/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/GrantChecker.java deleted file mode 100644 index 28d0d48ff1..0000000000 --- a/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/GrantChecker.java +++ /dev/null @@ -1,77 +0,0 @@ -/* $This file is distributed under the terms of the license in LICENSE$ */ - -package edu.cornell.mannlib.vivo.auth.policy; - -import java.util.List; - -import edu.cornell.mannlib.vitro.webapp.auth.policy.ifaces.PolicyDecision; -import edu.cornell.mannlib.vitro.webapp.auth.policy.specialrelationships.RelationshipChecker; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.propstmt.AbstractPropertyStatementAction; - -/** - * Does the requested action involve a change to a Grant that the self-editor is - * authorized to modify? - */ -public class GrantChecker extends RelationshipChecker { - private static final String URI_GRANT_TYPE = NS_CORE + "Grant"; - private static final String URI_PI_ROLE_TYPE = NS_CORE - + "PrincipalInvestigatorRole"; - private static final String URI_CO_PI_ROLE_TYPE = NS_CORE - + "CoPrincipalInvestigatorRole"; - - private final String[] resourceUris; - - public GrantChecker(AbstractPropertyStatementAction action) { - super(action.getOntModel()); - this.resourceUris = action.getResourceUris(); - } - - /** - * A self-editor is authorized to add, edit, or delete a statement if the - * subject or object refers to a Grant, and if the self-editor: - * - * 1) is a Principal Investigator (PI) of that Grant, or - * - * 2) is a co-Principal Investigator (co-PI) of that Grant - */ - public PolicyDecision isAuthorized(List userUris) { - for (String resourceUri : resourceUris) { - if (isGrant(resourceUri)) { - if (anyUrisInCommon(userUris, - getUrisOfPrincipalInvestigators(resourceUri))) { - return authorizedPI(resourceUri); - } - if (anyUrisInCommon(userUris, - getUrisOfCoPrincipalInvestigators(resourceUri))) { - return authorizedCoPI(resourceUri); - } - } - } - return null; - } - - private boolean isGrant(String resourceUri) { - return isResourceOfType(resourceUri, URI_GRANT_TYPE); - } - - private List getUrisOfPrincipalInvestigators(String resourceUri) { - return getObjectsThroughLinkingNode(resourceUri, URI_RELATES, - URI_PI_ROLE_TYPE, URI_INHERES_IN); - } - - private List getUrisOfCoPrincipalInvestigators(String resourceUri) { - return getObjectsThroughLinkingNode(resourceUri, URI_RELATES, - URI_CO_PI_ROLE_TYPE, URI_INHERES_IN); - } - - private PolicyDecision authorizedPI(String resourceUri) { - return authorizedDecision("User is Principal Investigator of " - + resourceUri); - } - - private PolicyDecision authorizedCoPI(String resourceUri) { - return authorizedDecision("User is Co-Principal Investigator of " - + resourceUri); - } - -} diff --git a/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/InfoContentEntityChecker.java b/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/InfoContentEntityChecker.java deleted file mode 100644 index 1b7dfca7fd..0000000000 --- a/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/InfoContentEntityChecker.java +++ /dev/null @@ -1,92 +0,0 @@ -/* $This file is distributed under the terms of the license in LICENSE$ */ - -package edu.cornell.mannlib.vivo.auth.policy; - -import java.util.List; - -import edu.cornell.mannlib.vitro.webapp.auth.policy.ifaces.PolicyDecision; -import edu.cornell.mannlib.vitro.webapp.auth.policy.specialrelationships.RelationshipChecker; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.propstmt.AbstractPropertyStatementAction; - -/** - * Does the requested action involve a change to an Info Content Entity that the - * self-editor is authorized to modify? - */ -public class InfoContentEntityChecker extends RelationshipChecker { - private static final String URI_INFO_CONTENT_TYPE = NS_OBO + "IAO_0000030"; - private static final String URI_FEATURES_PROPERTY = NS_CORE + "features"; - private static final String URI_AUTHORSHIP_TYPE = NS_CORE + "Authorship"; - private static final String URI_EDITORSHIP_TYPE = NS_CORE + "Editorship"; - - private final String[] resourceUris; - - public InfoContentEntityChecker(AbstractPropertyStatementAction action) { - super(action.getOntModel()); - this.resourceUris = action.getResourceUris(); - } - - /** - * A self-editor is authorized to add, edit, or delete a statement if the - * subject or object refers to an Info Content Entity, and if the - * self-editor: - * - * 1) is an Author of that Info Content Entity, - * - * 2) is an Editor of that Info Content Entity, or - * - * 3) is Featured in that Info Content Entity. - */ - public PolicyDecision isAuthorized(List userUris) { - for (String resourceUri : resourceUris) { - if (isInfoContentEntity(resourceUri)) { - if (anyUrisInCommon(userUris, getUrisOfAuthors(resourceUri))) { - return authorizedAuthor(resourceUri); - } - if (anyUrisInCommon(userUris, getUrisOfEditors(resourceUri))) { - return authorizedEditor(resourceUri); - } - if (anyUrisInCommon(userUris, getUrisOfFeatured(resourceUri))) { - return authorizedFeatured(resourceUri); - } - } - } - return null; - } - - private boolean isInfoContentEntity(String resourceUri) { - return isResourceOfType(resourceUri, URI_INFO_CONTENT_TYPE); - } - - private List getUrisOfEditors(String resourceUri) { - List allRelatedUris = getObjectsThroughLinkingNode(resourceUri, - URI_RELATED_BY, URI_EDITORSHIP_TYPE, URI_RELATES); - // The editorship relates to the editors and to the resource itself. - allRelatedUris.remove(resourceUri); - return allRelatedUris; - } - - private List getUrisOfFeatured(String resourceUri) { - return getObjectsOfProperty(resourceUri, URI_FEATURES_PROPERTY); - } - - private List getUrisOfAuthors(String resourceUri) { - List allRelatedUris = getObjectsThroughLinkingNode(resourceUri, - URI_RELATED_BY, URI_AUTHORSHIP_TYPE, URI_RELATES); - // The authorship relates to the authors and to the resource itself. - allRelatedUris.remove(resourceUri); - return allRelatedUris; - } - - private PolicyDecision authorizedEditor(String uri) { - return authorizedDecision("User is an editor of " + uri); - } - - private PolicyDecision authorizedAuthor(String uri) { - return authorizedDecision("User is author of " + uri); - } - - private PolicyDecision authorizedFeatured(String uri) { - return authorizedDecision("User is featured in " + uri); - } - -} diff --git a/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/PresentationChecker.java b/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/PresentationChecker.java deleted file mode 100644 index b3471d322e..0000000000 --- a/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/PresentationChecker.java +++ /dev/null @@ -1,58 +0,0 @@ -/* $This file is distributed under the terms of the license in LICENSE$ */ - -package edu.cornell.mannlib.vivo.auth.policy; - -import java.util.List; - -import edu.cornell.mannlib.vitro.webapp.auth.policy.ifaces.PolicyDecision; -import edu.cornell.mannlib.vitro.webapp.auth.policy.specialrelationships.RelationshipChecker; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.propstmt.AbstractPropertyStatementAction; - -/** - * Does the requested action involve a change to a Presentation that the - * self-editor is authorized to modify? - */ -public class PresentationChecker extends RelationshipChecker { - private static final String URI_PRESENTATION_TYPE = NS_CORE - + "Presentation"; - private static final String URI_PRESENTER_ROLE_TYPE = NS_CORE - + "PresenterRole"; - - private final String[] resourceUris; - - public PresentationChecker(AbstractPropertyStatementAction action) { - super(action.getOntModel()); - this.resourceUris = action.getResourceUris(); - } - - /** - * A self-editor is authorized to add, edit, or delete a statement if the - * subject or object refers to a Presentation, and if the self-editor: - * - * 1) is a Presenter of that Presentation - */ - public PolicyDecision isAuthorized(List userUris) { - for (String resourceUri : resourceUris) { - if (isPresentation(resourceUri)) { - if (anyUrisInCommon(userUris, getUrisOfPresenters(resourceUri))) { - return authorizedPresenter(resourceUri); - } - } - } - return null; - } - - private boolean isPresentation(String resourceUri) { - return isResourceOfType(resourceUri, URI_PRESENTATION_TYPE); - } - - private List getUrisOfPresenters(String resourceUri) { - return getObjectsThroughLinkingNode(resourceUri, URI_REALIZES, - URI_PRESENTER_ROLE_TYPE, URI_INHERES_IN); - } - - private PolicyDecision authorizedPresenter(String resourceUri) { - return authorizedDecision("User is a Presenter of " + resourceUri); - } - -} diff --git a/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/ProjectOrServiceChecker.java b/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/ProjectOrServiceChecker.java deleted file mode 100644 index 2f9e7ea37b..0000000000 --- a/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/ProjectOrServiceChecker.java +++ /dev/null @@ -1,78 +0,0 @@ -/* $This file is distributed under the terms of the license in LICENSE$ */ - -package edu.cornell.mannlib.vivo.auth.policy; - -import java.util.List; - -import edu.cornell.mannlib.vitro.webapp.auth.policy.ifaces.PolicyDecision; -import edu.cornell.mannlib.vitro.webapp.auth.policy.specialrelationships.RelationshipChecker; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.propstmt.AbstractPropertyStatementAction; - -/** - * Does the requested action involve a change to a Project or Service that the - * self-editor is authorized to modify? - */ -public class ProjectOrServiceChecker extends RelationshipChecker { - private static final String URI_PROJECT_TYPE = NS_CORE + "Project"; - private static final String URI_SERVICE_TYPE = NS_CORE + "Service"; - private static final String URI_CLINICAL_ROLE_TYPE = NS_CORE - + "ClinicalRole"; - private static final String URI_CONTRIBUTING_ROLE_PROPERTY = NS_CORE - + "contributingRole"; - - private final String[] resourceUris; - - public ProjectOrServiceChecker(AbstractPropertyStatementAction action) { - super(action.getOntModel()); - this.resourceUris = action.getResourceUris(); - } - - /** - * A self-editor is authorized to add, edit, or delete a statement if the - * subject or object refers to a Project or a Service, and if the - * self-editor: - * - * 1) is a Clinical Agent of that Project or Service - */ - public PolicyDecision isAuthorized(List userUris) { - for (String resourceUri : resourceUris) { - if (isProject(resourceUri)) { - if (anyUrisInCommon(userUris, - getClinicalAgentsOfProject(resourceUri))) { - return authorizedClinicalAgent(resourceUri); - } - } - if (isService(resourceUri)) { - if (anyUrisInCommon(userUris, - getClinicalAgentsOfService(resourceUri))) { - return authorizedClinicalAgent(resourceUri); - } - } - } - return null; - } - - private boolean isProject(String resourceUri) { - return isResourceOfType(resourceUri, URI_PROJECT_TYPE); - } - - private boolean isService(String resourceUri) { - return isResourceOfType(resourceUri, URI_SERVICE_TYPE); - } - - private List getClinicalAgentsOfProject(String resourceUri) { - return getObjectsThroughLinkingNode(resourceUri, URI_REALIZES, - URI_CLINICAL_ROLE_TYPE, URI_INHERES_IN); - } - - private List getClinicalAgentsOfService(String resourceUri) { - return getObjectsThroughLinkingNode(resourceUri, - URI_CONTRIBUTING_ROLE_PROPERTY, URI_CLINICAL_ROLE_TYPE, - URI_INHERES_IN); - } - - private PolicyDecision authorizedClinicalAgent(String resourceUri) { - return authorizedDecision("User has a Clinical Role on " + resourceUri); - } - -} diff --git a/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/SelfEditorRelationshipPolicy.java b/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/SelfEditorRelationshipPolicy.java deleted file mode 100644 index a1c12a0c0d..0000000000 --- a/api/src/main/java/edu/cornell/mannlib/vivo/auth/policy/SelfEditorRelationshipPolicy.java +++ /dev/null @@ -1,143 +0,0 @@ -/* $This file is distributed under the terms of the license in LICENSE$ */ - -package edu.cornell.mannlib.vivo.auth.policy; - -import java.util.ArrayList; -import java.util.List; - -import javax.servlet.ServletContext; -import javax.servlet.ServletContextEvent; -import javax.servlet.ServletContextListener; - -import org.apache.commons.logging.Log; -import org.apache.commons.logging.LogFactory; - -import edu.cornell.mannlib.vitro.webapp.auth.identifier.IdentifierBundle; -import edu.cornell.mannlib.vitro.webapp.auth.identifier.common.HasAssociatedIndividual; -import edu.cornell.mannlib.vitro.webapp.auth.policy.ServletPolicyList; -import edu.cornell.mannlib.vitro.webapp.auth.policy.ifaces.PolicyDecision; -import edu.cornell.mannlib.vitro.webapp.auth.policy.ifaces.PolicyIface; -import edu.cornell.mannlib.vitro.webapp.auth.policy.specialrelationships.AbstractRelationshipPolicy; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.RequestedAction; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.propstmt.AbstractPropertyStatementAction; - -/** - * Permit self-editors to edit the properties of classes with which they share a - * special relationship. So for example: - * - * A self-editor may edit properties of an InformationResource for which he is - * an author, an editor, or in which he is featured. - * - * A self-editor may edit properties of a Project in which he plays a clinical - * role. - * - * Etc. - * - * NOTE: properties or resources which are restricted by namespace or by access - * setting will still not be editable, even if this special relationship - * applies. - * - * NOTE: This could be further generalized by building a list of authorizing - * relationships, where each relationship may specify a type of object, a - * relating property (or chain of properties), and a text message describing the - * relationship (to be used in the decision). - */ -public class SelfEditorRelationshipPolicy extends AbstractRelationshipPolicy - implements PolicyIface { - private static final Log log = LogFactory - .getLog(SelfEditorRelationshipPolicy.class); - - public SelfEditorRelationshipPolicy(ServletContext ctx) { - super(ctx); - } - - @Override - public PolicyDecision isAuthorized(IdentifierBundle whoToAuth, - RequestedAction whatToAuth) { - if (whatToAuth == null) { - return inconclusiveDecision("whatToAuth was null"); - } - - if (!(whatToAuth instanceof AbstractPropertyStatementAction)) { - return inconclusiveDecision("Does not authorize " - + whatToAuth.getClass().getSimpleName() + " actions"); - } - AbstractPropertyStatementAction action = (AbstractPropertyStatementAction) whatToAuth; - - List userUris = new ArrayList( - HasAssociatedIndividual.getIndividualUris(whoToAuth)); - if (userUris.isEmpty()) { - return inconclusiveDecision("Not self-editing."); - } - - if (!canModifyPredicate(action.getPredicate())) { - return cantModifyPredicate(action.getPredicate().getURI()); - } - - for (String resourceUri : action.getResourceUris()) { - if (!canModifyResource(resourceUri)) { - return cantModifyResource(resourceUri); - } - } - - return checkRelationships(userUris, action); - } - - private PolicyDecision checkRelationships(List userUris, - AbstractPropertyStatementAction action) { - - PolicyDecision decision = new InfoContentEntityChecker(action) - .isAuthorized(userUris); - if (decision == null) { - decision = new GrantChecker(action).isAuthorized(userUris); - } - if (decision == null) { - decision = new ProjectOrServiceChecker(action) - .isAuthorized(userUris); - } - if (decision == null) { - decision = new PresentationChecker(action).isAuthorized(userUris); - } - if (decision == null) { - decision = new CourseChecker(action).isAuthorized(userUris); - } - if (decision == null) { - decision = new AdvisingRelationshipChecker(action).isAuthorized(userUris); - } - if (decision == null) { - decision = userNotAuthorizedToStatement(); - } - return decision; - } - - @Override - public String toString() { - return this.getClass().getSimpleName() - + ": information resources, grants, projects, etc. - " - + hashCode(); - } - - // ---------------------------------------------------------------------- - // helper classes - // ---------------------------------------------------------------------- - - /** - * When the system starts up, install the policy. This class must be a - * listener in web.xml - * - * The CommonIdentifierBundleFactory already creates the IDs we need. - */ - public static class Setup implements ServletContextListener { - @Override - public void contextInitialized(ServletContextEvent sce) { - ServletContext ctx = sce.getServletContext(); - - ServletPolicyList.addPolicy(ctx, new SelfEditorRelationshipPolicy( - ctx)); - } - - @Override - public void contextDestroyed(ServletContextEvent sce) { /* nothing */ - } - } -} diff --git a/api/src/main/java/org/vivoweb/webapp/controller/freemarker/CreateAndLinkResourceController.java b/api/src/main/java/org/vivoweb/webapp/controller/freemarker/CreateAndLinkResourceController.java index e531452188..e6c14905dc 100644 --- a/api/src/main/java/org/vivoweb/webapp/controller/freemarker/CreateAndLinkResourceController.java +++ b/api/src/main/java/org/vivoweb/webapp/controller/freemarker/CreateAndLinkResourceController.java @@ -3,11 +3,13 @@ package org.vivoweb.webapp.controller.freemarker; import edu.cornell.mannlib.vedit.beans.LoginStatusBean; +import edu.cornell.mannlib.vitro.webapp.auth.attributes.AccessOperation; +import edu.cornell.mannlib.vitro.webapp.auth.objects.DataPropertyStatementAccessObject; +import edu.cornell.mannlib.vitro.webapp.auth.objects.ObjectPropertyStatementAccessObject; import edu.cornell.mannlib.vitro.webapp.auth.permissions.SimplePermission; import edu.cornell.mannlib.vitro.webapp.auth.policy.PolicyHelper; import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.AuthorizationRequest; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.propstmt.AddDataPropertyStatement; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.propstmt.AddObjectPropertyStatement; +import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.SimpleAuthorizationRequest; import edu.cornell.mannlib.vitro.webapp.beans.Individual; import edu.cornell.mannlib.vitro.webapp.beans.SelfEditingConfiguration; import edu.cornell.mannlib.vitro.webapp.beans.UserAccount; @@ -50,6 +52,11 @@ import javax.servlet.ServletContext; import javax.servlet.ServletException; import javax.servlet.annotation.WebServlet; + +import static edu.cornell.mannlib.vitro.webapp.auth.objects.AccessObject.SOME_LITERAL; +import static edu.cornell.mannlib.vitro.webapp.auth.objects.AccessObject.SOME_PREDICATE; +import static edu.cornell.mannlib.vitro.webapp.auth.objects.AccessObject.SOME_URI; + import java.io.ByteArrayInputStream; import java.io.ByteArrayOutputStream; import java.io.IOException; @@ -64,10 +71,6 @@ import java.util.Map; import java.util.Set; -import static edu.cornell.mannlib.vitro.webapp.auth.requestedAction.RequestedAction.SOME_LITERAL; -import static edu.cornell.mannlib.vitro.webapp.auth.requestedAction.RequestedAction.SOME_PREDICATE; -import static edu.cornell.mannlib.vitro.webapp.auth.requestedAction.RequestedAction.SOME_URI; - /** * Main controller class for claiming (creating and/or linking) resources to a profile */ @@ -294,9 +297,13 @@ protected ResponseValues processRequest(VitroRequest vreq) { // Check that we have back end editing priveleges if (!PolicyHelper.isAuthorizedForActions(vreq, SimplePermission.DO_BACK_END_EDITING.ACTION)) { // If all else fails, can we add statements to this individual? - AddDataPropertyStatement adps = new AddDataPropertyStatement(vreq.getJenaOntModel(), profileUri, SOME_URI, SOME_LITERAL); - AddObjectPropertyStatement aops = new AddObjectPropertyStatement(vreq.getJenaOntModel(), profileUri, SOME_PREDICATE, SOME_URI); - if (!PolicyHelper.isAuthorizedForActions(vreq, adps.or(aops))) { + DataPropertyStatementAccessObject dpsAccessObject = new DataPropertyStatementAccessObject( + vreq.getJenaOntModel(), profileUri, SOME_URI, SOME_LITERAL); + ObjectPropertyStatementAccessObject opsAccessObject = new ObjectPropertyStatementAccessObject( + vreq.getJenaOntModel(), profileUri, SOME_PREDICATE, SOME_URI); + if (!PolicyHelper.isAuthorizedForActions(vreq, + AuthorizationRequest.or(new SimpleAuthorizationRequest(dpsAccessObject, AccessOperation.ADD), + new SimpleAuthorizationRequest(opsAccessObject, AccessOperation.ADD)))) { return new TemplateResponseValues("unauthorizedForProfile.ftl"); } } diff --git a/api/src/test/java/edu/cornell/mannlib/vivo/auth/policy/SelfEditorRelationshipPolicyTest.java b/api/src/test/java/edu/cornell/mannlib/vivo/auth/policy/SelfEditorRelationshipPolicyTest.java deleted file mode 100644 index 4c4f11446c..0000000000 --- a/api/src/test/java/edu/cornell/mannlib/vivo/auth/policy/SelfEditorRelationshipPolicyTest.java +++ /dev/null @@ -1,448 +0,0 @@ -/* $This file is distributed under the terms of the license in LICENSE$ */ - -package edu.cornell.mannlib.vivo.auth.policy; - -import static edu.cornell.mannlib.vitro.webapp.auth.policy.ifaces.Authorization.AUTHORIZED; -import static edu.cornell.mannlib.vitro.webapp.auth.policy.ifaces.Authorization.INCONCLUSIVE; -import static edu.cornell.mannlib.vitro.webapp.auth.requestedAction.RequestedAction.SOME_LITERAL; -import static org.junit.Assert.assertEquals; -import static org.junit.Assert.assertNotNull; - -import java.io.IOException; -import java.io.InputStream; - -import org.apache.commons.logging.Log; -import org.apache.commons.logging.LogFactory; -import org.junit.Before; -import org.junit.BeforeClass; -import org.junit.Test; - -import stubs.edu.cornell.mannlib.vitro.webapp.auth.policy.bean.PropertyRestrictionBeanStub; -import stubs.javax.servlet.ServletContextStub; - -import org.apache.jena.ontology.OntModel; -import org.apache.jena.ontology.OntModelSpec; -import org.apache.jena.rdf.model.Model; -import org.apache.jena.rdf.model.ModelFactory; -import org.apache.jena.rdf.model.Statement; -import org.apache.jena.rdf.model.StmtIterator; - -import edu.cornell.mannlib.vitro.testing.AbstractTestClass; -import edu.cornell.mannlib.vitro.webapp.auth.identifier.ArrayIdentifierBundle; -import edu.cornell.mannlib.vitro.webapp.auth.identifier.IdentifierBundle; -import edu.cornell.mannlib.vitro.webapp.auth.identifier.common.HasProfile; -import edu.cornell.mannlib.vitro.webapp.auth.policy.ifaces.Authorization; -import edu.cornell.mannlib.vitro.webapp.auth.policy.ifaces.PolicyDecision; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.RequestedAction; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.admin.ServerStatus; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.propstmt.AddDataPropertyStatement; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.propstmt.AddObjectPropertyStatement; -import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.resource.AddResource; -import edu.cornell.mannlib.vitro.webapp.beans.Property; -import edu.cornell.mannlib.vitro.webapp.dao.VitroVocabulary; - -/** - * Check the relationships in the SelfEditorRelationshipPolicy. - * - * This only checks the relationships that deal with InfoContentEntitys. Testing - * the others seems too redundant. If we generalize this to use configurable - * relationships, then we'll be able to make more general tests as well. - */ -public class SelfEditorRelationshipPolicyTest extends AbstractTestClass { - private static final Log log = LogFactory - .getLog(SelfEditorRelationshipPolicyTest.class); - - /** Can edit properties or resources in this namespace. */ - private static final String NS_PERMITTED = "http://vivo.mydomain.edu/individual/"; - - /** Can't edit properties or resources in this namespace. */ - private static final String NS_RESTRICTED = VitroVocabulary.vitroURI; - - /** The resource type is not checked by the admin restrictor. */ - private static final String RESOURCE_TYPE = NS_RESTRICTED + "funkyType"; - - private static final String URI_PERMITTED_RESOURCE = NS_PERMITTED - + "permittedResource"; - private static final String URI_RESTRICTED_RESOURCE = NS_RESTRICTED - + "restrictedResource"; - - private static final String URI_PERMITTED_PREDICATE = NS_PERMITTED - + "permittedPredicate"; - private static final Property PERMITTED_PREDICATE = new Property( - URI_PERMITTED_PREDICATE); - private static final String URI_RESTRICTED_PREDICATE = NS_RESTRICTED - + "restrictedPredicate"; - private static final Property RESTRICTED_PREDICATE = new Property( - URI_RESTRICTED_PREDICATE); - - /** - * Where the model statements are stored for this test. - */ - private static final String N3_DATA_FILENAME = "SelfEditorRelationship" - + "PolicyTest.n3"; - - /** - * These URIs must match the data in the N3 file. - */ - private static final String URI_BOZO = NS_PERMITTED + "bozo"; - private static final String URI_JOE = NS_PERMITTED + "joe"; - private static final String URI_NOBODY_WROTE_IT = NS_PERMITTED - + "nobodyWroteIt"; - private static final String URI_BOZO_WROTE_IT = NS_PERMITTED - + "bozoWroteIt"; - private static final String URI_BOZO_EDITED_IT = NS_PERMITTED - + "bozoEditedIt"; - private static final String URI_BOZO_FEATURED_IN_IT = NS_PERMITTED - + "bozoFeaturedInIt"; - private static final String URI_JOE_WROTE_IT = NS_PERMITTED + "joeWroteIt"; - private static final String URI_JOE_EDITED_IT = NS_PERMITTED - + "joeEditedIt"; - private static final String URI_JOE_FEATURED_IN_IT = NS_PERMITTED - + "joeFeaturedInIt"; - - private static OntModel ontModel; - - @BeforeClass - public static void setupModel() throws IOException { - InputStream stream = SelfEditorRelationshipPolicyTest.class - .getResourceAsStream(N3_DATA_FILENAME); - Model model = ModelFactory.createDefaultModel(); - model.read(stream, null, "N3"); - stream.close(); - - ontModel = ModelFactory.createOntologyModel(OntModelSpec.OWL_DL_MEM, - model); - ontModel.prepare(); - dumpModel(); - } - - private SelfEditorRelationshipPolicy policy; - private RequestedAction action; - - @Before - public void setupPolicy() { - ServletContextStub ctx = new ServletContextStub(); - PropertyRestrictionBeanStub.getInstance(new String[] { NS_RESTRICTED }); - - policy = new SelfEditorRelationshipPolicy(ctx); - } - - private IdentifierBundle idNobody; - private IdentifierBundle idBozo; - private IdentifierBundle idJoe; - private IdentifierBundle idBozoAndJoe; - - @Before - public void setupIdBundles() { - idNobody = new ArrayIdentifierBundle(); - - idBozo = new ArrayIdentifierBundle(); - idBozo.add(makeSelfEditingId(URI_BOZO)); - - idJoe = new ArrayIdentifierBundle(); - idJoe.add(makeSelfEditingId(URI_JOE)); - - idBozoAndJoe = new ArrayIdentifierBundle(); - idBozoAndJoe.add(makeSelfEditingId(URI_BOZO)); - idBozoAndJoe.add(makeSelfEditingId(URI_JOE)); - } - - @Before - public void setLogging() { - // setLoggerLevel(this.getClass(), Level.DEBUG); - } - - // ---------------------------------------------------------------------- - // boilerplate tests - // ---------------------------------------------------------------------- - - @Test - public void whoIsNull() { - action = new AddResource(RESOURCE_TYPE, URI_PERMITTED_RESOURCE); - assertDecision(INCONCLUSIVE, policy.isAuthorized(null, action)); - } - - @Test - public void whatIsNull() { - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, null)); - } - - @Test - public void notSelfEditing() { - action = new AddResource(RESOURCE_TYPE, URI_PERMITTED_RESOURCE); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idNobody, action)); - } - - @Test - public void requestedActionOutOfScope() { - action = new ServerStatus(); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - @Test - public void dataPropSubjectIsRestricted() { - action = new AddDataPropertyStatement(ontModel, - URI_RESTRICTED_RESOURCE, URI_PERMITTED_PREDICATE, SOME_LITERAL); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - @Test - public void dataPropPredicateIsRestricted() { - action = new AddDataPropertyStatement(ontModel, URI_JOE_EDITED_IT, - URI_RESTRICTED_PREDICATE, SOME_LITERAL); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - @Test - public void objectPropSubjectIsRestricted() { - action = new AddObjectPropertyStatement(ontModel, - URI_RESTRICTED_RESOURCE, PERMITTED_PREDICATE, URI_JOE_EDITED_IT); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - @Test - public void objectPropPredicateIsRestricted() { - action = new AddObjectPropertyStatement(ontModel, - URI_PERMITTED_RESOURCE, RESTRICTED_PREDICATE, URI_JOE_EDITED_IT); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - @Test - public void objectPropObjectIsRestricted() { - action = new AddObjectPropertyStatement(ontModel, URI_JOE_EDITED_IT, - PERMITTED_PREDICATE, URI_RESTRICTED_RESOURCE); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - // ---------------------------------------------------------------------- - // InfoContentEntity tests - // ---------------------------------------------------------------------- - - @Test - public void dataPropSubjectIsIceButNobodyIsSelfEditing() { - action = new AddDataPropertyStatement(ontModel, URI_JOE_WROTE_IT, - URI_PERMITTED_PREDICATE, SOME_LITERAL); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idNobody, action)); - } - - @Test - public void dataPropSubjectIsIceButNoAuthorsOrEditorsOrFeatured() { - action = new AddDataPropertyStatement(ontModel, URI_NOBODY_WROTE_IT, - URI_PERMITTED_PREDICATE, SOME_LITERAL); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idBozoAndJoe, action)); - } - - @Test - public void dataPropSubjectIsIceButWrongAuthor() { - action = new AddDataPropertyStatement(ontModel, URI_BOZO_WROTE_IT, - URI_PERMITTED_PREDICATE, SOME_LITERAL); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - @Test - public void dataPropSubjectIsIceButWrongEditor() { - action = new AddDataPropertyStatement(ontModel, URI_BOZO_EDITED_IT, - URI_PERMITTED_PREDICATE, SOME_LITERAL); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - @Test - public void dataPropSubjectIsIceButWrongFeatured() { - action = new AddDataPropertyStatement(ontModel, - URI_BOZO_FEATURED_IN_IT, URI_PERMITTED_PREDICATE, SOME_LITERAL); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - @Test - public void dataPropSubjectIsIceWithSelfEditingAuthor() { - action = new AddDataPropertyStatement(ontModel, URI_JOE_WROTE_IT, - URI_PERMITTED_PREDICATE, SOME_LITERAL); - assertDecision(AUTHORIZED, policy.isAuthorized(idJoe, action)); - assertDecision(AUTHORIZED, policy.isAuthorized(idBozoAndJoe, action)); - } - - @Test - public void dataPropSubjectIsIceWithSelfEditingEditor() { - action = new AddDataPropertyStatement(ontModel, URI_JOE_EDITED_IT, - URI_PERMITTED_PREDICATE, SOME_LITERAL); - assertDecision(AUTHORIZED, policy.isAuthorized(idJoe, action)); - assertDecision(AUTHORIZED, policy.isAuthorized(idBozoAndJoe, action)); - } - - @Test - public void dataPropSubjectIsIceWithSelfEditingFeatured() { - action = new AddDataPropertyStatement(ontModel, URI_JOE_FEATURED_IN_IT, - URI_PERMITTED_PREDICATE, SOME_LITERAL); - assertDecision(AUTHORIZED, policy.isAuthorized(idJoe, action)); - assertDecision(AUTHORIZED, policy.isAuthorized(idBozoAndJoe, action)); - } - - @Test - public void objectPropSubjectIsIceButNobodyIsSelfEditing() { - action = new AddObjectPropertyStatement(ontModel, URI_JOE_EDITED_IT, - PERMITTED_PREDICATE, URI_PERMITTED_RESOURCE); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idNobody, action)); - } - - @Test - public void objectPropSubjectIsIceButNoAuthorsOrEditorsOrFeatured() { - action = new AddObjectPropertyStatement(ontModel, URI_NOBODY_WROTE_IT, - PERMITTED_PREDICATE, URI_PERMITTED_RESOURCE); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idBozoAndJoe, action)); - } - - @Test - public void objectPropSubjectIsIceButWrongAuthor() { - action = new AddObjectPropertyStatement(ontModel, URI_BOZO_WROTE_IT, - PERMITTED_PREDICATE, URI_PERMITTED_RESOURCE); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - @Test - public void objectPropSubjectIsIceButWrongEditor() { - action = new AddObjectPropertyStatement(ontModel, URI_BOZO_EDITED_IT, - PERMITTED_PREDICATE, URI_PERMITTED_RESOURCE); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - @Test - public void objectPropSubjectIsIceButWrongFeatured() { - action = new AddObjectPropertyStatement(ontModel, - URI_BOZO_FEATURED_IN_IT, PERMITTED_PREDICATE, - URI_PERMITTED_RESOURCE); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - @Test - public void objectPropSubjectIsIceWithSelfEditingAuthor() { - action = new AddObjectPropertyStatement(ontModel, URI_JOE_WROTE_IT, - PERMITTED_PREDICATE, URI_PERMITTED_RESOURCE); - assertDecision(AUTHORIZED, policy.isAuthorized(idJoe, action)); - assertDecision(AUTHORIZED, policy.isAuthorized(idBozoAndJoe, action)); - } - - @Test - public void objectPropSubjectIsIceWithSelfEditingEditor() { - action = new AddObjectPropertyStatement(ontModel, URI_JOE_EDITED_IT, - PERMITTED_PREDICATE, URI_PERMITTED_RESOURCE); - assertDecision(AUTHORIZED, policy.isAuthorized(idJoe, action)); - assertDecision(AUTHORIZED, policy.isAuthorized(idBozoAndJoe, action)); - } - - @Test - public void objectPropSubjectIsIceWithSelfEditingFeatured() { - action = new AddObjectPropertyStatement(ontModel, - URI_JOE_FEATURED_IN_IT, PERMITTED_PREDICATE, - URI_PERMITTED_RESOURCE); - assertDecision(AUTHORIZED, policy.isAuthorized(idJoe, action)); - assertDecision(AUTHORIZED, policy.isAuthorized(idBozoAndJoe, action)); - } - - @Test - public void objectPropObjectIsIcebutNobodyIsSelfEditing() { - action = new AddObjectPropertyStatement(ontModel, - URI_PERMITTED_RESOURCE, PERMITTED_PREDICATE, URI_JOE_EDITED_IT); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idNobody, action)); - } - - @Test - public void objectPropObjectIsIceButNoAuthorsOrEditors() { - action = new AddObjectPropertyStatement(ontModel, - URI_PERMITTED_RESOURCE, PERMITTED_PREDICATE, - URI_NOBODY_WROTE_IT); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idBozoAndJoe, action)); - } - - @Test - public void objectPropObjectIsIceButWrongAuthor() { - action = new AddObjectPropertyStatement(ontModel, - URI_PERMITTED_RESOURCE, PERMITTED_PREDICATE, URI_BOZO_WROTE_IT); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - @Test - public void objectPropObjectIsIceButWrongEditor() { - action = new AddObjectPropertyStatement(ontModel, - URI_PERMITTED_RESOURCE, PERMITTED_PREDICATE, URI_BOZO_EDITED_IT); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - @Test - public void objectPropObjectIsIceButWrongFeatured() { - action = new AddObjectPropertyStatement(ontModel, - URI_PERMITTED_RESOURCE, PERMITTED_PREDICATE, - URI_BOZO_FEATURED_IN_IT); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - @Test - public void objectPropObjectIsIceWithSelfEditingAuthor() { - action = new AddObjectPropertyStatement(ontModel, - URI_PERMITTED_RESOURCE, PERMITTED_PREDICATE, URI_JOE_WROTE_IT); - assertDecision(AUTHORIZED, policy.isAuthorized(idJoe, action)); - assertDecision(AUTHORIZED, policy.isAuthorized(idBozoAndJoe, action)); - } - - @Test - public void objectPropObjectIsIceWithSelfEditingEditor() { - action = new AddObjectPropertyStatement(ontModel, - URI_PERMITTED_RESOURCE, PERMITTED_PREDICATE, URI_JOE_EDITED_IT); - assertDecision(AUTHORIZED, policy.isAuthorized(idJoe, action)); - assertDecision(AUTHORIZED, policy.isAuthorized(idBozoAndJoe, action)); - } - - @Test - public void objectPropObjectIsIceWithSelfEditingFeatured() { - action = new AddObjectPropertyStatement(ontModel, - URI_PERMITTED_RESOURCE, PERMITTED_PREDICATE, - URI_JOE_FEATURED_IN_IT); - assertDecision(AUTHORIZED, policy.isAuthorized(idJoe, action)); - assertDecision(AUTHORIZED, policy.isAuthorized(idBozoAndJoe, action)); - } - - // ---------------------------------------------------------------------- - // Other tests - // ---------------------------------------------------------------------- - - @Test - public void dataPropSubjectIsNotIce() { - action = new AddDataPropertyStatement(ontModel, URI_PERMITTED_RESOURCE, - URI_PERMITTED_PREDICATE, SOME_LITERAL); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - @Test - public void objectPropNeitherSubjectOrObjectIsIce() { - action = new AddObjectPropertyStatement(ontModel, - URI_PERMITTED_RESOURCE, PERMITTED_PREDICATE, - URI_PERMITTED_RESOURCE); - assertDecision(INCONCLUSIVE, policy.isAuthorized(idJoe, action)); - } - - // ---------------------------------------------------------------------- - // helper methods - // ---------------------------------------------------------------------- - - private HasProfile makeSelfEditingId(String uri) { - return new HasProfile(uri); - } - - private void assertDecision(Authorization expected, PolicyDecision decision) { - log.debug("Decision is: " + decision); - assertNotNull("decision exists", decision); - assertEquals("authorization", expected, decision.getAuthorized()); - } - - private static void dumpModel() { - if (log.isDebugEnabled()) { - StmtIterator stmtIt = ontModel.listStatements(); - while (stmtIt.hasNext()) { - Statement stmt = stmtIt.next(); - log.debug("stmt: " + stmt); - } - } - } -} diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_add_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_add_data_property.n3 new file mode 100644 index 0000000000..1a2942498c --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_add_data_property.n3 @@ -0,0 +1,172 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:AdminAddDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_add_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_add_faux_object_property.n3 new file mode 100644 index 0000000000..3aee63afb3 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_add_faux_object_property.n3 @@ -0,0 +1,116 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:AdminAddFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_add_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_add_object_property.n3 new file mode 100644 index 0000000000..4d6f7d427a --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_add_object_property.n3 @@ -0,0 +1,113 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:AdminAddObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_display_class.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_display_class.n3 new file mode 100644 index 0000000000..3b71e7fb2e --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_display_class.n3 @@ -0,0 +1,230 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix access: . +@prefix : . + +:AdminDisplayClassValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_display_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_display_data_property.n3 new file mode 100644 index 0000000000..26bc443f8b --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_display_data_property.n3 @@ -0,0 +1,93 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix access: . +@prefix : . + +:AdminDisplayDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_display_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_display_faux_object_property.n3 new file mode 100644 index 0000000000..8422923147 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_display_faux_object_property.n3 @@ -0,0 +1,120 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix access: . +@prefix : . + +:AdminDisplayFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_display_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_display_object_property.n3 new file mode 100644 index 0000000000..62ee1ed5fb --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_display_object_property.n3 @@ -0,0 +1,115 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix access: . +@prefix : . + +:AdminDisplayObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_drop_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_drop_data_property.n3 new file mode 100644 index 0000000000..a756ffa1e6 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_drop_data_property.n3 @@ -0,0 +1,172 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix access: . +@prefix : . + +:AdminDropDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_drop_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_drop_faux_object_property.n3 new file mode 100644 index 0000000000..d1236693c7 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_drop_faux_object_property.n3 @@ -0,0 +1,116 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix access: . +@prefix : . + +:AdminDropFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_drop_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_drop_object_property.n3 new file mode 100644 index 0000000000..83166301e5 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_drop_object_property.n3 @@ -0,0 +1,111 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix access: . +@prefix : . + +:AdminDropObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_edit_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_edit_data_property.n3 new file mode 100644 index 0000000000..f8d3c64f7e --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_edit_data_property.n3 @@ -0,0 +1,172 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix access: . +@prefix : . + +:AdminEditDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_edit_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_edit_faux_object_property.n3 new file mode 100644 index 0000000000..68a22d415f --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_edit_faux_object_property.n3 @@ -0,0 +1,116 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix access: . +@prefix : . + +:AdminEditFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_edit_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_edit_object_property.n3 new file mode 100644 index 0000000000..9592e9eec0 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_edit_object_property.n3 @@ -0,0 +1,111 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix access: . +@prefix : . + +:AdminEditObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_publish_class.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_publish_class.n3 new file mode 100644 index 0000000000..25b8400020 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_publish_class.n3 @@ -0,0 +1,229 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:AdminPublishClassValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_publish_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_publish_data_property.n3 new file mode 100644 index 0000000000..225bb5c631 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_publish_data_property.n3 @@ -0,0 +1,178 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix access: . +@prefix : . + +:AdminPublishDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_publish_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_publish_faux_object_property.n3 new file mode 100644 index 0000000000..1eb6a49017 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_publish_faux_object_property.n3 @@ -0,0 +1,121 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix access: . +@prefix : . + +:AdminPublishFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_publish_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_publish_object_property.n3 new file mode 100644 index 0000000000..3a7a3777ec --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_publish_object_property.n3 @@ -0,0 +1,154 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix access: . +@prefix : . + +:AdminPublishObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_update_class.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_update_class.n3 new file mode 100644 index 0000000000..74476c910e --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_admin_update_class.n3 @@ -0,0 +1,7 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +# :AdminUpdateClassValueSet access:value <> . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_add_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_add_data_property.n3 new file mode 100644 index 0000000000..983201f453 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_add_data_property.n3 @@ -0,0 +1,171 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorAddDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_add_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_add_faux_object_property.n3 new file mode 100644 index 0000000000..7f31112875 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_add_faux_object_property.n3 @@ -0,0 +1,116 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorAddFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_add_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_add_object_property.n3 new file mode 100644 index 0000000000..ec010390fc --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_add_object_property.n3 @@ -0,0 +1,110 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorAddObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_display_class.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_display_class.n3 new file mode 100644 index 0000000000..6361139544 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_display_class.n3 @@ -0,0 +1,230 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorDisplayClassValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_display_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_display_data_property.n3 new file mode 100644 index 0000000000..35b6f77955 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_display_data_property.n3 @@ -0,0 +1,92 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorDisplayDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_display_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_display_faux_object_property.n3 new file mode 100644 index 0000000000..0bf7dffcfc --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_display_faux_object_property.n3 @@ -0,0 +1,120 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorDisplayFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_display_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_display_object_property.n3 new file mode 100644 index 0000000000..7cfd0214e3 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_display_object_property.n3 @@ -0,0 +1,114 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorDisplayObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_drop_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_drop_data_property.n3 new file mode 100644 index 0000000000..56ca57f680 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_drop_data_property.n3 @@ -0,0 +1,171 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorDropDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_drop_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_drop_faux_object_property.n3 new file mode 100644 index 0000000000..f32ba4c20d --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_drop_faux_object_property.n3 @@ -0,0 +1,116 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorDropFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_drop_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_drop_object_property.n3 new file mode 100644 index 0000000000..6ca286611d --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_drop_object_property.n3 @@ -0,0 +1,111 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorDropObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_edit_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_edit_data_property.n3 new file mode 100644 index 0000000000..25da9fdb82 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_edit_data_property.n3 @@ -0,0 +1,170 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorEditDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_edit_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_edit_faux_object_property.n3 new file mode 100644 index 0000000000..7b97f6d31c --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_edit_faux_object_property.n3 @@ -0,0 +1,115 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorEditFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_edit_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_edit_object_property.n3 new file mode 100644 index 0000000000..03a4701a14 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_edit_object_property.n3 @@ -0,0 +1,110 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorEditObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_publish_class.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_publish_class.n3 new file mode 100644 index 0000000000..507e189c6e --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_publish_class.n3 @@ -0,0 +1,229 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorPublishClassValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_publish_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_publish_data_property.n3 new file mode 100644 index 0000000000..a3aeb0e627 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_publish_data_property.n3 @@ -0,0 +1,177 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorPublishDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_publish_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_publish_faux_object_property.n3 new file mode 100644 index 0000000000..0278c3da32 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_publish_faux_object_property.n3 @@ -0,0 +1,121 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorPublishFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_publish_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_publish_object_property.n3 new file mode 100644 index 0000000000..ee165e7119 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_publish_object_property.n3 @@ -0,0 +1,154 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:CuratorPublishObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_update_class.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_update_class.n3 new file mode 100644 index 0000000000..2b15178560 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_curator_update_class.n3 @@ -0,0 +1,7 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +#:CuratorUpdateClassValueSet access:value <> . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_add_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_add_data_property.n3 new file mode 100644 index 0000000000..057d7b52c9 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_add_data_property.n3 @@ -0,0 +1,171 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorAddDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_add_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_add_faux_object_property.n3 new file mode 100644 index 0000000000..1249da6ab7 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_add_faux_object_property.n3 @@ -0,0 +1,116 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorAddFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_add_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_add_object_property.n3 new file mode 100644 index 0000000000..32aa0cf76f --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_add_object_property.n3 @@ -0,0 +1,110 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorAddObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_display_class.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_display_class.n3 new file mode 100644 index 0000000000..e63b8a5fcc --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_display_class.n3 @@ -0,0 +1,229 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorDisplayClassValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_display_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_display_data_property.n3 new file mode 100644 index 0000000000..d3cfce3122 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_display_data_property.n3 @@ -0,0 +1,92 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorDisplayDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_display_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_display_faux_object_property.n3 new file mode 100644 index 0000000000..e67e3b4f93 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_display_faux_object_property.n3 @@ -0,0 +1,119 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorDisplayFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_display_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_display_object_property.n3 new file mode 100644 index 0000000000..b0f21f1d85 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_display_object_property.n3 @@ -0,0 +1,114 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorDisplayObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_drop_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_drop_data_property.n3 new file mode 100644 index 0000000000..e7ca8b51f8 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_drop_data_property.n3 @@ -0,0 +1,170 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorDropDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_drop_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_drop_faux_object_property.n3 new file mode 100644 index 0000000000..aa9feed49e --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_drop_faux_object_property.n3 @@ -0,0 +1,115 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorDropFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_drop_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_drop_object_property.n3 new file mode 100644 index 0000000000..aab004cebc --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_drop_object_property.n3 @@ -0,0 +1,110 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorDropObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_edit_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_edit_data_property.n3 new file mode 100644 index 0000000000..fb2e2602a4 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_edit_data_property.n3 @@ -0,0 +1,171 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorEditDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_edit_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_edit_faux_object_property.n3 new file mode 100644 index 0000000000..f88b66e6c2 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_edit_faux_object_property.n3 @@ -0,0 +1,115 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorEditFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_edit_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_edit_object_property.n3 new file mode 100644 index 0000000000..10240e6a95 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_edit_object_property.n3 @@ -0,0 +1,110 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorEditObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_publish_class.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_publish_class.n3 new file mode 100644 index 0000000000..d3b652af4c --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_publish_class.n3 @@ -0,0 +1,230 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorPublishClassValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_publish_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_publish_data_property.n3 new file mode 100644 index 0000000000..e5984b47f1 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_publish_data_property.n3 @@ -0,0 +1,177 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorPublishDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_publish_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_publish_faux_object_property.n3 new file mode 100644 index 0000000000..4ef4bda071 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_publish_faux_object_property.n3 @@ -0,0 +1,120 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorPublishFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_publish_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_publish_object_property.n3 new file mode 100644 index 0000000000..a26ac74773 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_publish_object_property.n3 @@ -0,0 +1,154 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:EditorPublishObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_update_class.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_update_class.n3 new file mode 100644 index 0000000000..b25a99287c --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_editor_update_class.n3 @@ -0,0 +1,7 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +#:EditorUpdateClassValueSet access:value <> . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_add_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_add_data_property.n3 new file mode 100644 index 0000000000..7c645b8707 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_add_data_property.n3 @@ -0,0 +1,7 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +#:PublicAddDataPropertyValueSet access:value <> . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_add_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_add_faux_object_property.n3 new file mode 100644 index 0000000000..38de285df2 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_add_faux_object_property.n3 @@ -0,0 +1,7 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +# :PublicAddFauxObjectPropertyValueSet access:value <> . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_add_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_add_object_property.n3 new file mode 100644 index 0000000000..7501129378 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_add_object_property.n3 @@ -0,0 +1,6 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +#:PublicAddObjectPropertyValueSet access:value <> . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_display_class.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_display_class.n3 new file mode 100644 index 0000000000..be801c5402 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_display_class.n3 @@ -0,0 +1,229 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:PublicDisplayClassValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_display_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_display_data_property.n3 new file mode 100644 index 0000000000..6a39a33131 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_display_data_property.n3 @@ -0,0 +1,87 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:PublicDisplayDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_display_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_display_faux_object_property.n3 new file mode 100644 index 0000000000..c450460fcb --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_display_faux_object_property.n3 @@ -0,0 +1,119 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:PublicDisplayFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_display_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_display_object_property.n3 new file mode 100644 index 0000000000..d4cec47118 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_display_object_property.n3 @@ -0,0 +1,113 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:PublicDisplayObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_drop_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_drop_data_property.n3 new file mode 100644 index 0000000000..3f1f486996 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_drop_data_property.n3 @@ -0,0 +1,7 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +# :PublicDropDataPropertyValueSet access:value <> . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_drop_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_drop_faux_object_property.n3 new file mode 100644 index 0000000000..4019a1d5f1 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_drop_faux_object_property.n3 @@ -0,0 +1,7 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +#:PublicDropFauxObjectPropertyValueSet access:value <> . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_drop_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_drop_object_property.n3 new file mode 100644 index 0000000000..4eca2f9e65 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_drop_object_property.n3 @@ -0,0 +1,7 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +# :PublicDropObjectPropertyValueSet access:value <> . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_edit_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_edit_data_property.n3 new file mode 100644 index 0000000000..8a420dfb29 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_edit_data_property.n3 @@ -0,0 +1,6 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +#:PublicEditDataPropertyValueSet access:value <> . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_edit_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_edit_faux_object_property.n3 new file mode 100644 index 0000000000..e365288606 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_edit_faux_object_property.n3 @@ -0,0 +1,7 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +#:PublicEditFauxObjectPropertyValueSet access:value <> . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_edit_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_edit_object_property.n3 new file mode 100644 index 0000000000..9b7c56e4f8 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_edit_object_property.n3 @@ -0,0 +1,6 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +#:PublicEditObjectPropertyValueSet access:value <> . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_update_class.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_update_class.n3 new file mode 100644 index 0000000000..d73a597ba0 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_public_update_class.n3 @@ -0,0 +1,7 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +#:PublicUpdateClassValueSet access:value <> . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_add_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_add_data_property.n3 new file mode 100644 index 0000000000..0010337b21 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_add_data_property.n3 @@ -0,0 +1,168 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorAddDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_add_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_add_faux_object_property.n3 new file mode 100644 index 0000000000..f781c48c5a --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_add_faux_object_property.n3 @@ -0,0 +1,115 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorAddFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_add_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_add_object_property.n3 new file mode 100644 index 0000000000..aa542ee369 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_add_object_property.n3 @@ -0,0 +1,110 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorAddObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_display_class.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_display_class.n3 new file mode 100644 index 0000000000..2e9848be56 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_display_class.n3 @@ -0,0 +1,230 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorDisplayClassValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_display_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_display_data_property.n3 new file mode 100644 index 0000000000..dfd61c52f0 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_display_data_property.n3 @@ -0,0 +1,91 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorDisplayDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_display_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_display_faux_object_property.n3 new file mode 100644 index 0000000000..27f272c167 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_display_faux_object_property.n3 @@ -0,0 +1,119 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorDisplayFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_display_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_display_object_property.n3 new file mode 100644 index 0000000000..ab600ac71d --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_display_object_property.n3 @@ -0,0 +1,114 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorDisplayObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_drop_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_drop_data_property.n3 new file mode 100644 index 0000000000..2059ddbbb5 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_drop_data_property.n3 @@ -0,0 +1,168 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorDropDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_drop_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_drop_faux_object_property.n3 new file mode 100644 index 0000000000..c4741b9a29 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_drop_faux_object_property.n3 @@ -0,0 +1,115 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorDropFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_drop_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_drop_object_property.n3 new file mode 100644 index 0000000000..96efd6b818 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_drop_object_property.n3 @@ -0,0 +1,110 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorDropObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_edit_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_edit_data_property.n3 new file mode 100644 index 0000000000..15be33a1be --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_edit_data_property.n3 @@ -0,0 +1,169 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorEditDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_edit_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_edit_faux_object_property.n3 new file mode 100644 index 0000000000..a295a4f257 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_edit_faux_object_property.n3 @@ -0,0 +1,115 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorEditFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_edit_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_edit_object_property.n3 new file mode 100644 index 0000000000..84ad908c71 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_edit_object_property.n3 @@ -0,0 +1,110 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorEditObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_publish_class.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_publish_class.n3 new file mode 100644 index 0000000000..7a83db9710 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_publish_class.n3 @@ -0,0 +1,230 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorPublishClassValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_publish_data_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_publish_data_property.n3 new file mode 100644 index 0000000000..addeff9e60 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_publish_data_property.n3 @@ -0,0 +1,177 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorPublishDataPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_publish_faux_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_publish_faux_object_property.n3 new file mode 100644 index 0000000000..a0d57ba486 --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_publish_faux_object_property.n3 @@ -0,0 +1,121 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorPublishFauxObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_publish_object_property.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_publish_object_property.n3 new file mode 100644 index 0000000000..86a373c8bf --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_publish_object_property.n3 @@ -0,0 +1,154 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +:SelfEditorPublishObjectPropertyValueSet access:value + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + , + . diff --git a/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_update_class.n3 b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_update_class.n3 new file mode 100644 index 0000000000..081806db5f --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/allowed_entities_self_editor_update_class.n3 @@ -0,0 +1,7 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix : . +@prefix access: . + +#:SelfEditorUpdateClassValueSet access:value <> . + diff --git a/home/src/main/resources/rdf/accessControl/firsttime/profile_proximity_query.n3 b/home/src/main/resources/rdf/accessControl/firsttime/profile_proximity_query.n3 new file mode 100644 index 0000000000..550c30d81c --- /dev/null +++ b/home/src/main/resources/rdf/accessControl/firsttime/profile_proximity_query.n3 @@ -0,0 +1,77 @@ +# $This file is distributed under the terms of the license in LICENSE$ + +@prefix access-individual: . +@prefix access: . + +access-individual:PersonProfileProximityToResourceUri a access:SparqlSelectValuesQuery ; + access:id """ + SELECT ?resourceUri WHERE { + { + ?personUri ?roleUri . + ?roleUri a . + ?roleUri ?resourceUri . + ?resourceUri a . + } + UNION + { + ?personUri ?roleUri . + ?roleUri a . + ?roleUri ?resourceUri . + ?resourceUri a . + } + UNION + { + ?personUri ?roleUri . + ?roleUri a . + ?roleUri ?resourceUri . + ?resourceUri a . + } + UNION + { + ?personUri ?roleUri . + ?roleUri a . + ?roleUri ?resourceUri . + ?resourceUri a . + } + UNION + { + ?personUri ?roleUri . + ?roleUri a . + ?roleUri ?resourceUri . + ?resourceUri a . + } + UNION + { + ?personUri ?roleUri . + ?roleUri a . + ?roleUri ?resourceUri . + ?resourceUri a . + } + UNION + { + ?personUri ?roleUri . + ?roleUri a . + ?roleUri ?resourceUri . + ?resourceUri a . + } + UNION + { + ?personUri ?roleUri . + ?roleUri a . + ?roleUri ?resourceUri . + ?resourceUri a . + } + UNION + { + ?personUri ?roleUri . + ?roleUri a . + ?roleUri ?resourceUri . + ?resourceUri a . + } + UNION + { + BIND ( ?personUri as ?resourceUri) + } + } + """ . + diff --git a/webapp/src/main/webapp/WEB-INF/resources/startup_listeners.txt b/webapp/src/main/webapp/WEB-INF/resources/startup_listeners.txt index 25ec69783e..3061e655d8 100644 --- a/webapp/src/main/webapp/WEB-INF/resources/startup_listeners.txt +++ b/webapp/src/main/webapp/WEB-INF/resources/startup_listeners.txt @@ -48,19 +48,14 @@ edu.cornell.mannlib.vitro.webapp.servlet.setup.SimpleReasonerSetup # Must run after JenaDataSourceSetup edu.cornell.mannlib.vitro.webapp.servlet.setup.ThemeInfoSetup -edu.cornell.mannlib.vitro.webapp.auth.permissions.PermissionRegistry$Setup edu.cornell.mannlib.vitro.webapp.auth.permissions.PermissionSetsSmokeTest -edu.cornell.mannlib.vitro.webapp.auth.policy.bean.PropertyRestrictionBean$Setup - edu.cornell.mannlib.vitro.webapp.auth.policy.setup.CommonPolicyFamilySetup -edu.cornell.mannlib.vitro.webapp.auth.policy.RootUserPolicy$Setup - -edu.cornell.mannlib.vivo.auth.policy.SelfEditorRelationshipPolicy$Setup +edu.cornell.mannlib.vitro.webapp.migration.auth.AuthMigrator -edu.cornell.mannlib.vitro.webapp.auth.policy.RestrictHomeMenuItemEditingPolicy$Setup +edu.cornell.mannlib.vitro.webapp.auth.RootUserSetup edu.cornell.mannlib.vitro.webapp.services.shortview.ShortViewServiceSetup