mirror of
https://github.com/bonfire-networks/bonfire-app.git
synced 2024-05-15 07:32:42 +00:00
config
This commit is contained in:
Mayel de Borniol
parent
5fe9504381
commit
94453d7952
32
Makefile
32
Makefile
|
|
@ -273,6 +273,23 @@ git.forks.status: ## Run a git status on each fork
|
|||
git.forks~%: ## Run a git command on each fork (eg. `make git.forks~pull` pulls the latest version of all local deps from its git remote
|
||||
@find $(FORKS_PATH) -mindepth 1 -maxdepth 1 -type d -exec echo $* {} \; -exec git -C '{}' $* \;
|
||||
|
||||
git.diff: ## List all diffs in forks
|
||||
@find $(FORKS_PATH) -mindepth 1 -maxdepth 1 -type d -exec echo {} \; -exec git -C '{}' --no-pager diff --color --exit-code \;
|
||||
|
||||
deps.git.fix: ## Run a git command on each dep, to ignore chmod changes
|
||||
find ./deps -mindepth 1 -maxdepth 1 -type d -exec git -C '{}' config core.fileMode false \;
|
||||
find ./forks -mindepth 1 -maxdepth 1 -type d -exec git -C '{}' config core.fileMode false \;
|
||||
|
||||
git.merge~%: ## Draft-merge another branch, eg `make git-merge-with-valueflows-api` to merge branch `with-valueflows-api` into the current one
|
||||
git merge --no-ff --no-commit $*
|
||||
|
||||
git.conflicts: ## Find any git conflicts in ./forks
|
||||
find $(FORKS_PATH) -mindepth 1 -maxdepth 1 -type d -exec echo add {} \; -exec git -C '{}' diff --name-only --diff-filter=U \;
|
||||
|
||||
git.publish:
|
||||
chmod +x git-publish.sh
|
||||
./git-publish.sh
|
||||
|
||||
#### TESTING RELATED COMMANDS ####
|
||||
|
||||
test.env:
|
||||
|
|
@ -476,18 +493,3 @@ db.pre-migrations: ## Workaround for some issues running migrations
|
|||
secrets:
|
||||
@cd lib/mix/tasks/secrets/ && mix escript.build && ./secrets 128 3
|
||||
|
||||
|
||||
git.publish:
|
||||
chmod +x git-publish.sh
|
||||
./git-publish.sh
|
||||
|
||||
deps.git.fix: ## Run a git command on each dep, to ignore chmod changes
|
||||
find ./deps -mindepth 1 -maxdepth 1 -type d -exec git -C '{}' config core.fileMode false \;
|
||||
find ./forks -mindepth 1 -maxdepth 1 -type d -exec git -C '{}' config core.fileMode false \;
|
||||
|
||||
git.merge~%: ## Draft-merge another branch, eg `make git-merge-with-valueflows-api` to merge branch `with-valueflows-api` into the current one
|
||||
git merge --no-ff --no-commit $*
|
||||
|
||||
git.conflicts: ## Find any git conflicts in ./forks
|
||||
find $(FORKS_PATH) -mindepth 1 -maxdepth 1 -type d -exec echo add {} \; -exec git -C '{}' diff --name-only --diff-filter=U \;
|
||||
|
||||
|
|
|
|||
|
|
@ -16,8 +16,8 @@ config :activity_pub, :instance,
|
|||
|
||||
config :activity_pub, :boundaries,
|
||||
block: [],
|
||||
silence: [],
|
||||
ghost: []
|
||||
silence_them: [],
|
||||
ghost_them: []
|
||||
|
||||
config :activity_pub, :mrf_simple,
|
||||
reject: [],
|
||||
|
|
|
|||
|
|
@ -4,8 +4,8 @@ config :bonfire_boundaries,
|
|||
disabled: false
|
||||
|
||||
verbs = %{
|
||||
read: %{id: "0EAD1NGSVTTER1YFVNDAMENTA1", verb: "Read"},
|
||||
see: %{id: "0BSERV1NG11ST1NGSEX1STENCE", verb: "See"},
|
||||
see: %{id: "0BSERV1NG11ST1NGSEX1STENCE", verb: "See"}, # see/discover it as part of a list of things (eg in feeds and search)
|
||||
read: %{id: "0EAD1NGSVTTER1YFVNDAMENTA1", verb: "Read"}, # read the contents if you know the ID (eg. you known the username or have a direct link)
|
||||
create: %{id: "4REATE0RP0STBRANDNEW0BJECT", verb: "Create"},
|
||||
edit: %{id: "4HANG1NGVA1VES0FPR0PERT1ES", verb: "Edit"},
|
||||
delete: %{id: "4AKESTVFFG0AWAYPERMANENT1Y", verb: "Delete"},
|
||||
|
|
@ -13,13 +13,17 @@ verbs = %{
|
|||
like: %{id: "11KES1ND1CATEAM11DAPPR0VA1", verb: "Like"},
|
||||
boost: %{id: "300ST0R0RANN0VCEANACT1V1TY", verb: "Boost"},
|
||||
flag: %{id: "71AGSPAM0RVNACCEPTAB1E1TEM", verb: "Flag"},
|
||||
reply: %{id: "71TCREAT1NGA11NKEDRESP0NSE", verb: "Reply"},
|
||||
mention: %{id: "0EFERENC1NGTH1NGSE1SEWHERE", verb: "Mention"},
|
||||
tag: %{id: "4ATEG0R1S1NGNGR0VP1NGSTVFF", verb: "Tag"},
|
||||
reply: %{id: "71TCREAT1NGA11NKEDRESP0NSE", verb: "Reply"},
|
||||
message: %{id: "40NTACTW1THAPR1VATEMESSAGE", verb: "Message"},
|
||||
}
|
||||
|
||||
ghost_verbs = verbs |> Enum.reduce(%{}, &Map.put(&2, elem(&1, 0), false)) # stops them from seeing you, or anything else
|
||||
silence_verbs = [:mention] |> Enum.reduce(%{}, &Map.put(&2, &1, false)) # stops you from hearing them
|
||||
all_verb_names = Enum.map(verbs, &elem(&1, 0))
|
||||
|
||||
negative_grants = fn verbs ->
|
||||
Enum.reduce(verbs, %{}, &Map.put(&2, &1, false))
|
||||
end
|
||||
|
||||
config :bonfire,
|
||||
verbs: verbs,
|
||||
|
|
@ -30,58 +34,80 @@ config :bonfire,
|
|||
flag: Bonfire.Data.Social.Flag,
|
||||
like: Bonfire.Data.Social.Like,
|
||||
],
|
||||
circles: %{
|
||||
circles: %{ # global circles, and steoreotypes for user circles
|
||||
guest: %{id: "0AND0MSTRANGERS0FF1NTERNET", name: "Guests"},
|
||||
local: %{id: "3SERSFR0MY0VR10CA11NSTANCE", name: "Local Users"},
|
||||
activity_pub: %{id: "7EDERATEDW1THANACT1V1TYPVB", name: "ActivityPub Peers"},
|
||||
# stereotypes
|
||||
followers: %{id: "7DAPE0P1E1PERM1TT0F0110WME", name: "My Followers"},
|
||||
ghost: %{id: "7N010NGERC0NSENTT0Y0VN0WTY", name: "Ghost"},
|
||||
silence: %{id: "7N010NGERWANTT011STENT0Y0V", name: "Silence"},
|
||||
ghost_them: %{id: "7N010NGERC0NSENTT0Y0VN0WTY", name: "Others I ghosted"},
|
||||
silence_them: %{id: "7N010NGERWANTT011STENT0Y0V", name: "Others I silenced"},
|
||||
silence_me: %{id: "0KF1NEY0VD0N0TWANTT0HEARME", name: "Others who silenced me"},
|
||||
},
|
||||
acls: %{
|
||||
guests_may_read: %{id: "7W1DE1YAVA11AB1ET0SEENREAD", name: "Publically visible"},
|
||||
locals_may_read: %{id: "10CA1SMAYSEEANDREAD0N1YN0W", name: "Locally visible"},
|
||||
acls: %{ # global ACLs, and steoreotypes for user ACLs
|
||||
guests_may_see_read: %{id: "7W1DE1YAVA11AB1ET0SEENREAD", name: "Publicly discoverable and readable"},
|
||||
guests_may_see: %{id: "Y0VCANF1NDMEBVTCAN0T0PENME", name: "Publicly discoverable, but contents may be hidden"},
|
||||
guests_may_read: %{id: "Y0VCANREAD1FY0VHAVETHE11NK", name: "Publicly readable, but not necessarily discoverable"},
|
||||
locals_may_read: %{id: "10CA1SMAYSEEANDREAD0N1YN0W", name: "Visible to local users"},
|
||||
locals_may_interact: %{id: "710CA1SMY1NTERACTN0TREP1YY", name: "Local users may read and interact"},
|
||||
locals_may_reply: %{id: "710CA1SMY1NTERACTANDREP1YY", name: "Local users may read, interact and reply"},
|
||||
### stereotypes - access levels
|
||||
# i_may_* - mix one of these in as appropriate when creating something
|
||||
i_may_read: %{id: "71MAYSEEANDREADMY0WNSTVFFS", name: "I may read"},
|
||||
i_may_interact: %{id: "71MAY1NTERACTW1MY0WNSTVFFS", name: "I may read and interact"},
|
||||
# i_may_read: %{id: "71MAYSEEANDREADMY0WNSTVFFS", name: "I may read"},
|
||||
# i_may_interact: %{id: "71MAY1NTERACTW1MY0WNSTVFFS", name: "I may read and interact"},
|
||||
i_may_administer: %{id: "71MAYADM1N1STERMY0WNSTVFFS", name: "I may administer"},
|
||||
# mentions_may_* - mix one of these in when composing a custom acl for mentions
|
||||
# mentions_may_* - TODO? mix one of these in when composing a custom acl for mentions
|
||||
mentions_may_read: %{id: "7MENT10NSCANREADTH1STH1NGS", name: "Mentions may read"},
|
||||
mentions_may_interact: %{id: "7MENT10NSCAN1NTERACTW1TH1T", name: "Mentions may read and interact"},
|
||||
mentions_may_reply: %{id: "7MENT10NSCANEVENREP1YT01TS", name: "Mentions may read, interact and reply"},
|
||||
### stereotypes - always mix in
|
||||
negative: %{id: "7AC0MPVTERBESAY1NGN0THANKS", name: "Negative"},
|
||||
### stereotypes - always mix this in
|
||||
they_cannot_anything: %{id: "0H0STEDCANTSEE0RD0ANYTH1NG", name: "People I ghosted so can't see or do anything"},
|
||||
they_cannot_reach: %{id: "1S11ENCEDTHEMS0CAN0TP1NGME", name: "People I silenced so they can't reach me"},
|
||||
they_cannot_see: %{id: "2HEYS11ENCEDMES0CAN0TSEEME", name: "People who silenced me so don't see me in feeds"},
|
||||
},
|
||||
grants: %{
|
||||
guests_may_read: %{guest: [:read, :see]},
|
||||
grants: %{ # reusable global grants (a grant is an ACL + verbs)
|
||||
guests_may_see_read: %{guest: [:read, :see]},
|
||||
guests_may_see: %{guest: [:read]},
|
||||
guests_may_read: %{guest: [:read]},
|
||||
locals_may_interact: %{local: [:read, :see, :mention, :tag, :boost, :flag, :like, :follow]},
|
||||
locals_may_reply: %{local: [:read, :see, :mention, :tag, :boost, :flag, :like, :follow, :reply]},
|
||||
they_cannot_anything: %{ghost_them: negative_grants.(all_verb_names)}, # people/instances ghosted instance-wide can't see us (or interact with or anything)
|
||||
they_cannot_reach: %{silence_them: negative_grants.([:mention, :message, :reply])}, # people/instances silenced instance-wide can't ping us
|
||||
},
|
||||
user_default_boundaries: %{ # default boundaries created for new users
|
||||
circles: %{
|
||||
followers: %{stereotype: :followers},
|
||||
ghost: %{stereotype: :ghost},
|
||||
silence: %{stereotype: :silence},
|
||||
circles: %{ # built-in circles for users
|
||||
followers: %{stereotype: :followers}, # this one can be seen but not directly edited by the user (TODO: it instead should get updated automatically when you follow/unfollow)
|
||||
ghost_them: %{stereotype: :ghost_them},
|
||||
silence_them: %{stereotype: :silence_them},
|
||||
silence_me: %{stereotype: :silence_me}, # this one is for internal use and can't be seen by the user
|
||||
},
|
||||
acls: %{
|
||||
i_may_read: %{stereotype: :i_may_read, name: "I may read"},
|
||||
i_may_reply: %{stereotype: :i_may_interact, name: "I may read, interact and reply"},
|
||||
i_may_administer: %{stereotype: :i_may_administer, name: "I may administer"},
|
||||
negative: %{stereotype: :negative, name: "Blocked"},
|
||||
acls: %{ # built-in ACLs for users
|
||||
# i_may_read: %{stereotype: :i_may_read},
|
||||
# i_may_reply: %{stereotype: :i_may_interact},
|
||||
i_may_administer: %{stereotype: :i_may_administer},
|
||||
they_cannot_anything: %{stereotype: :they_cannot_anything},
|
||||
they_cannot_reach: %{stereotype: :they_cannot_reach},
|
||||
they_cannot_see: %{stereotype: :they_cannot_see},
|
||||
},
|
||||
grants: %{
|
||||
i_may_read: %{SELF: [:read, :see]},
|
||||
i_may_reply: %{SELF: [:read, :see, :create, :mention, :tag, :boost, :flag, :like, :follow, :reply]},
|
||||
i_may_administer: %{SELF: [:read, :see, :edit, :delete]},
|
||||
negative: %{ghost: ghost_verbs, silence: silence_verbs},
|
||||
grants: %{ # reusable grants for the user or their circles
|
||||
# i_may_read: %{SELF: [:read, :see]},
|
||||
# i_may_reply: %{SELF: [:read, :see, :create, :mention, :tag, :boost, :flag, :like, :follow, :reply]},
|
||||
i_may_administer: %{SELF: all_verb_names},
|
||||
they_cannot_anything: %{ghost_them: negative_grants.(all_verb_names)}, # people/instances I ghost can't see (or interact with or anything) me or my objects
|
||||
they_cannot_reach: %{silence_them: negative_grants.([:mention, :message])}, # people/instances I silence can't ping me
|
||||
they_cannot_see: %{silence_me: negative_grants.([:see])}, # people who silence me can't see me or my objects in feeds and such (but can still read them if they have a direct link)
|
||||
},
|
||||
controlleds: %{
|
||||
# set what grants to apply to the user itself
|
||||
# by default, we may administer ourselves. within contexts, we
|
||||
# may add more depending on whether the user is local or remote.
|
||||
SELF: [:guests_may_read, :locals_may_interact, :i_may_administer]
|
||||
SELF:
|
||||
[:guests_may_see_read, :locals_may_interact, :i_may_administer]
|
||||
++ [:they_cannot_anything, :they_cannot_reach, :they_cannot_see] # should be same as object_default_boundaries
|
||||
},
|
||||
},
|
||||
object_default_boundaries: %{ # boundaries that should be applied to every new object
|
||||
acls:
|
||||
[:i_may_administer]
|
||||
++ [:they_cannot_anything, :they_cannot_reach, :they_cannot_see]
|
||||
}
|
||||
|
|
|
|||
|
|
@ -53,7 +53,7 @@ alias Bonfire.Data.AccessControl.{
|
|||
Acl, Circle, Encircle, Controlled, InstanceAdmin, Grant, Verb,
|
||||
}
|
||||
alias Bonfire.Data.ActivityPub.{Actor, Peer, Peered}
|
||||
alias Bonfire.Boundaries.Stereotype
|
||||
alias Bonfire.Boundaries.Stereotyped
|
||||
alias Bonfire.Data.Edges.{Edge,EdgeTotal}
|
||||
alias Bonfire.Data.Identity.{
|
||||
Account, Accounted, Caretaker, Character, Credential, Email, Named, Self, User,
|
||||
|
|
@ -103,7 +103,7 @@ config :pointers, Pointer,
|
|||
has_one :category, unquote(Category), references: :id, foreign_key: :id
|
||||
has_one :geolocation, unquote(Geolocation), references: :id, foreign_key: :id
|
||||
# mixins
|
||||
has_one :stereotype, unquote(Stereotype), foreign_key: :id
|
||||
has_one :stereotyped, unquote(Stereotyped), foreign_key: :id
|
||||
has_one :named, unquote(Named), foreign_key: :id
|
||||
has_one :caretaker, unquote(Caretaker), foreign_key: :id
|
||||
has_many :controlled, unquote(Controlled), foreign_key: :id, references: :id
|
||||
|
|
@ -145,7 +145,7 @@ config :bonfire_data_access_control, Acl,
|
|||
[code: quote do
|
||||
# this allows us to identify acls for the user which have special
|
||||
# meaning to the system, such as "public" or "private"
|
||||
has_one :stereotype, unquote(Stereotype), foreign_key: :id
|
||||
has_one :stereotyped, unquote(Stereotyped), foreign_key: :id
|
||||
has_one :caretaker, unquote(Caretaker), foreign_key: :id
|
||||
has_one :named, unquote(Named), foreign_key: :id
|
||||
# has_many :controlled, unquote(Controlled), foreign_key: :id, references: :id
|
||||
|
|
@ -156,7 +156,7 @@ config :bonfire_data_access_control, Circle,
|
|||
has_one :caretaker, unquote(Caretaker), foreign_key: :id
|
||||
has_one :named, unquote(Named), foreign_key: :id
|
||||
has_many :controlled, unquote(Controlled), foreign_key: :id, references: :id
|
||||
has_one :stereotype, unquote(Stereotype), foreign_key: :id
|
||||
has_one :stereotyped, unquote(Stereotyped), foreign_key: :id
|
||||
end]
|
||||
|
||||
config :bonfire_data_access_control, Controlled, []
|
||||
|
|
@ -169,9 +169,9 @@ config :bonfire_data_access_control, Grant,
|
|||
|
||||
config :bonfire_data_access_control, Verb, []
|
||||
|
||||
config :bonfire_boundaries, Stereotype,
|
||||
config :bonfire_boundaries, Stereotyped,
|
||||
[code: quote do
|
||||
has_one :named, unquote(Named), foreign_key: :id, references: :id
|
||||
has_one :named, unquote(Named), foreign_key: :id, references: :stereotype_id
|
||||
end]
|
||||
|
||||
# bonfire_data_activity_pub
|
||||
|
|
|
|||
|
|
@ -53,7 +53,7 @@ alias Bonfire.Data.AccessControl.{
|
|||
Acl, Circle, Encircle, Controlled, InstanceAdmin, Grant, Verb,
|
||||
}
|
||||
alias Bonfire.Data.ActivityPub.{Actor, Peer, Peered}
|
||||
alias Bonfire.Boundaries.Stereotype
|
||||
alias Bonfire.Boundaries.Stereotyped
|
||||
alias Bonfire.Data.Edges.{Edge,EdgeTotal}
|
||||
alias Bonfire.Data.Identity.{
|
||||
Account, Accounted, Caretaker, Character, Credential, Email, Named, Self, User,
|
||||
|
|
|
|||
|
|
@ -53,7 +53,7 @@ alias Bonfire.Data.AccessControl.{
|
|||
Acl, Circle, Encircle, Controlled, InstanceAdmin, Grant, Verb,
|
||||
}
|
||||
alias Bonfire.Data.ActivityPub.{Actor, Peer, Peered}
|
||||
alias Bonfire.Boundaries.Stereotype
|
||||
alias Bonfire.Boundaries.Stereotyped
|
||||
alias Bonfire.Data.Edges.{Edge,EdgeTotal}
|
||||
alias Bonfire.Data.Identity.{
|
||||
Account, Accounted, Caretaker, Character, Credential, Email, Named, Self, User,
|
||||
|
|
|
|||
|
|
@ -53,7 +53,7 @@ alias Bonfire.Data.AccessControl.{
|
|||
Acl, Circle, Encircle, Controlled, InstanceAdmin, Grant, Verb,
|
||||
}
|
||||
alias Bonfire.Data.ActivityPub.{Actor, Peer, Peered}
|
||||
alias Bonfire.Boundaries.Stereotype
|
||||
alias Bonfire.Boundaries.Stereotyped
|
||||
alias Bonfire.Data.Edges.{Edge,EdgeTotal}
|
||||
alias Bonfire.Data.Identity.{
|
||||
Account, Accounted, Caretaker, Character, Credential, Email, Named, Self, User,
|
||||
|
|
|
|||
|
|
@ -53,7 +53,7 @@ alias Bonfire.Data.AccessControl.{
|
|||
Acl, Circle, Encircle, Controlled, InstanceAdmin, Grant, Verb,
|
||||
}
|
||||
alias Bonfire.Data.ActivityPub.{Actor, Peer, Peered}
|
||||
alias Bonfire.Boundaries.Stereotype
|
||||
alias Bonfire.Boundaries.Stereotyped
|
||||
alias Bonfire.Data.Edges.{Edge,EdgeTotal}
|
||||
alias Bonfire.Data.Identity.{
|
||||
Account, Accounted, Caretaker, Character, Credential, Email, Named, Self, User,
|
||||
|
|
|
|||
Loading…
Reference in a new issue