authorization-rules.yml

# ======================================
# Authorization Rules Configuration File
# ======================================
#
# This file contains a list of rules to authorize or protect
# granular changes in ZObjects.
#
# The Authorization strategy calculates all the atomic diff
# operations and tries to match each of them with the rules
# described in this file. When one of the rules matches the
# diff, the Authorization service collects the user rights
# required as per the matching rule and returns.
#
# Only the first matching rule is returned, so the order in
# the rules in this files is important; the most specific
# patterns should be detailed on top, while the most generic
# ones should be at the end of the rule list so that, if
# nothing else matches, it falls back to those.
#
# For detailed documentation on granular edit authorization, see:
# https://www.mediawiki.org/wiki/Extension:WikiLambda/Granular_Edit_Authorization

# ===========================
# Allow rules for all objects
# ===========================

# Change object type
- path: '^Z2K2(\.Z1K1.*)?$'
  filter: [ ZObjectFilterTypeChanged ]
  operations:
    any:
      - wikilambda-edit-object-type

# =======================================
# Multilingual info rules for all objects
# =======================================

# Change object labels
- path: '^Z2K3\.Z12K1\.[1-9]\d*(\..*)?$'
  operations:
    any:
      - wikilambda-edit-object-label

# Change object descriptions
- path: '^Z2K5(\.Z12K1\.[1-9]\d*.*)?$'
  operations:
    any:
      - wikilambda-edit-object-description

# Change object alias
- path: '^Z2K4(\.Z32K1\.[1-9]\d*.*)?$'
  operations:
    any:
      - wikilambda-edit-object-alias

# ============================================
# Multilingual info rules for particular types
# ============================================

# Change key labels of types
- path: '^.*\.Z3K3\.Z12K1\.[1-9]\d*(\..*)?$'
  type: Z4
  operations:
    any:
      - wikilambda-edit-key-label

# Change key labels of error types
- path: '^.*\.Z3K3\.Z12K1\.[1-9]\d*(\..*)?$'
  type: Z50
  operations:
    any:
      - wikilambda-edit-error-key-label

# Change input labels of functions
- path: '^.*\.Z17K3\.Z12K1\.[1-9]\d*(\..*)?$'
  type: Z8
  operations:
    any:
      - wikilambda-edit-argument-label

# =================================
# Rights for super-restricted types
# =================================

# Change boolean
- path: '^Z2K2\.(.*)?$'
  type: Z40
  operations:
    any:
      - wikilambda-edit-boolean

# Change unit
- path: '^Z2K2\.(.*)?$'
  type: Z21
  operations:
    any:
      - wikilambda-edit-unit

# ===========================
# Rights for restricted types
# ===========================

# Change language
- path: '^Z2K2\.(.*)?$'
  type: Z60
  operations:
    any:
      - wikilambda-edit-language

# Change programming language
- path: '^Z2K2\.(.*)?$'
  type: Z61
  operations:
    any:
      - wikilambda-edit-programming

# ======================
# Rights for enum values
# ======================

# Change an enum value
- path: '^Z2K2\.(.*)?$'
  filter: [ ZObjectFilterIsEnumValue ]
  operations:
    any:
      - wikilambda-edit-enum-value

# =======================================
# Rights for all other predefined objects
#
# These rights are terminal, so from now
# on, all following rules will be only
# applicable to user-contributed objects.
# =======================================

# Change any predefined function
- path: '^Z2K2(\..*)?$'
  type: Z8
  filter: [ ZObjectFilterInRange, null, Z10000 ]
  operations:
    any:
      - wikilambda-edit-builtin-function

# Change any predefined object
- path: '^Z2K2(\..*)?$'
  filter: [ ZObjectFilterInRange, null, Z10000 ]
  operations:
    any:
      - wikilambda-edit-predefined

# =================================
# Rights for user-contributed types
# =================================

# Change type
- path: '^Z2K2\.(.*)?$'
  type: Z4
  operations:
    any:
      - wikilambda-edit-type

# ======================================
# Rights for user-contributed converters
# ======================================

# Change connected deserialiser
- path: '^Z2K2\.(.*)?$'
  type: Z46
  filter: [ ZObjectFilterIsConnectedConverter ]
  operations:
    any:
      - wikilambda-edit-connected-converter

# Change connected serialiser
- path: '^Z2K2\.(.*)?$'
  type: Z64
  filter: [ ZObjectFilterIsConnectedConverter ]
  operations:
    any:
      - wikilambda-edit-connected-converter

# Change deserialiser
- path: '^Z2K2\.(.*)?$'
  type: Z46
  operations:
    any:
      - wikilambda-edit-converter

# Change serialiser
- path: '^Z2K2\.(.*)?$'
  type: Z64
  operations:
    any:
      - wikilambda-edit-converter

# =====================================
# Rights for user-contributed functions
# =====================================

# Change the inputs of a running user-function
- path: '^Z2K2\.Z8K1(\..*)?$'
  type: Z8
  filter: [ ZObjectFilterIsRunnable ]
  operations:
    any:
      - wikilambda-edit-user-function
      - wikilambda-edit-running-function
      - wikilambda-edit-running-function-definition

# Change the output type of a running user-function
- path: '^Z2K2\.Z8K2(\..*)?$'
  type: Z8
  filter: [ ZObjectFilterIsRunnable ]
  operations:
    any:
      - wikilambda-edit-user-function
      - wikilambda-edit-running-function
      - wikilambda-edit-running-function-definition

# Connect and disconnect tests from a running user-function
- path: '^Z2K2\.Z8K3\.[1-9]\d*(\..*)?$'
  type: Z8
  filter: [ ZObjectFilterIsRunnable ]
  operations:
    any:
      - wikilambda-edit-user-function
      - wikilambda-edit-running-function
    add:
      - wikilambda-connect-tester
    remove:
      - wikilambda-disconnect-tester
    change:
      - wikilambda-connect-tester
      - wikilambda-disconnect-tester

# Connect and disconnect implementations from a running user-function
- path: '^Z2K2\.Z8K4\.[1-9]\d*(\..*)?$'
  type: Z8
  filter: [ ZObjectFilterIsRunnable ]
  operations:
    any:
      - wikilambda-edit-user-function
      - wikilambda-edit-running-function
    add:
      - wikilambda-connect-implementation
    remove:
      - wikilambda-disconnect-implementation
    change:
      - wikilambda-connect-implementation
      - wikilambda-disconnect-implementation

# Connect and disconnect tests from a non-running user-function
- path: '^Z2K2\.Z8K3\.[1-9]\d*(\..*)?$'
  type: Z8
  operations:
    any:
      - wikilambda-edit-user-function
    add:
      - wikilambda-connect-tester
    remove:
      - wikilambda-disconnect-tester
    change:
      - wikilambda-connect-tester
      - wikilambda-disconnect-tester

# Connect and disconnect implementations from a non-running user-function
- path: '^Z2K2\.Z8K4\.[1-9]\d*(\..*)?$'
  type: Z8
  operations:
    any:
      - wikilambda-edit-user-function
    add:
      - wikilambda-connect-implementation
    remove:
      - wikilambda-disconnect-implementation
    change:
      - wikilambda-connect-implementation
      - wikilambda-disconnect-implementation

# Fallback: all other changes on user-function
- path: '^Z2K2\.(.*)?$'
  type: Z8
  operations:
    any:
      - wikilambda-edit-user-function

# =========================
# Rules for implementations
# =========================

# Change implementation that's connected to a function
- path: '^Z2K2\.(.*)?$'
  type: Z14
  filter: [ ZObjectFilterIsAttached ]
  operations:
    any:
      - wikilambda-edit-attached-implementation

# Change implementation that's not connected
- path: '^Z2K2\.(.*)?$'
  type: Z14
  operations:
    any:
      - wikilambda-edit-implementation

# ===============
# Rules for tests
# ===============

# Change test that's connected to a function
- path: '^Z2K2\.(.*)?$'
  type: Z20
  filter: [ ZObjectFilterIsAttached ]
  operations:
    any:
      - wikilambda-edit-attached-tester

# Change test that's not connected to a function
- path: '^Z2K2\.(.*)?$'
  type: Z20
  operations:
    any:
      - wikilambda-edit-tester

# ==================================
# Fallback rules for edit any object
# ==================================

# Change zobject
- path: '^Z2K2(\..*)?$'
  operations:
    any:
      - wikilambda-edit