access

const (
	KeyContent KeyKind = iota + 1 // <tenant>:content:<id>: legacy parent grant; audit/migration only
	KeyVersion                    // <tenant>:content:<id>/<version>: one version
	KeyChannel                    // <tenant>:group:<id>: a channel membership named by an explicit rule
	KeyTier                       // <tier>: a tier from config, such as premium
)

const (
	ChannelLevel Level = "group" // holders of Rule.ChannelID's key: members-only content
)

const (
	ChannelPPV Level = "group_ppv" // buyers; buying needs Rule.ChannelID's key first
)

const (
	PPV Level = "ppv" // buyers of this version
)

const (
	Public Level = "public" // anyone
)

const (
	TierLevel Level = "tier" // holders of any of Rule.Tiers
)

const (
	// Hide lists only what the viewer opens (a purchased library).
	Hide Mode = "hide"
)

const (
	// Lock lists everything; Decide marks what stays locked.
	Lock Mode = "lock"
)

const (
	// AccountsLifecycle: deliver AuthKit's account lifecycle (deleted,
	// restored, purged) to ContentKit over HTTP (a host service).
	AccountsLifecycle Permission = "root:accounts:lifecycle"
)

const (
	// AvatarsWrite: upload, edit and remove anyone's avatar on the avatar
	// primary, exempt from limits: staff, and another site forwarding its
	// people's (AvatarsConfig.Key).
	AvatarsWrite Permission = "root:avatars:write"
)

const (
	// ChannelsWrite: manage channel identity, lifecycle and configuration.
	ChannelsWrite Permission = "root:channels:write"
)

const (
	// CommentsBan: ban users from commenting anywhere in the tenant.
	CommentsBan Permission = "root:comments:ban"
)

const (
	// CommentsModerate: edit, delete and restore anyone's comments, and list
	// every comment.
	CommentsModerate Permission = "root:comments:moderate"
)

const (
	// ContentCreate: a signed-in person may create their own content outside
	// a channel. Channel posts require that channel's create or write grant.
	ContentCreate Permission = "root:content:create"
)

const (
	// ContentEditOwn: edit and publish content created by this account outside
	// a channel. Channel posts need the channel edit-own or broad write grant.
	ContentEditOwn Permission = "root:content:edit-own"
)

const (
	// ContentViewRestricted: see every content item, whatever its state,
	// listing, site scope or access, and the site's content statistics.
	ContentViewRestricted Permission = "root:content:view-restricted"
)

const (
	// ContentWrite: create, edit, publish, delete and restore any content
	// item, and see everything.
	ContentWrite Permission = "root:content:write"
)

const (
	// EntitiesWrite: create, edit, merge and delete entities, and set content's
	// memberships.
	EntitiesWrite Permission = "root:entities:write"
)

const (
	// ImportWrite: bulk-import content, entities, interactions and signals (a
	// legacy importer).
	ImportWrite Permission = "root:import:write"
)

const (
	// ModerationReview: list and resolve held comments and content.
	ModerationReview Permission = "root:moderation:review"
)

const (
	// NotificationsPublish: publish notices to users' inboxes (a host service).
	NotificationsPublish Permission = "root:notifications:publish"
)

const (
	// PollsWrite: create, edit and delete polls, their options and images,
	// and see scheduled and inactive ones.
	PollsWrite Permission = "root:polls:write"
)