unkin-agent
72e65d7810
Add an oauth2 provider/application for the mediamark kids-content marking UI, a permission group gating it, and nest that permission in akR-media-adult.
12 lines
573 B
YAML
12 lines
573 B
YAML
# Role akR-media-adult (name = filename): adult media tier. Adults reach both the
|
|
# adult ("fafflix") and kids ("cheeztv") services, so this role nests both
|
|
# per-service entitlements. Membership propagates child -> parent, so a member
|
|
# appears in both permission groups in the hierarchical `ak_groups` claim and the
|
|
# media proxy routes/authorizes them for fafflix and cheeztv. Adults also curate
|
|
# which titles are kids content, so the role nests akP-mediamark for access to
|
|
# the mediamark UI.
|
|
permissions:
|
|
- akP-media-fafflix
|
|
- akP-media-cheeztv
|
|
- akP-mediamark
|