80 lines
4.5 KiB
Plaintext
80 lines
4.5 KiB
Plaintext
--
|
|
-- Accesss granted via tags; default is no accesss.
|
|
-- Permission must be explicitly granted.
|
|
--
|
|
-- Access permission is the disjunction of permit tags
|
|
-- Tags are split on "AND" to encode conjunction.
|
|
--
|
|
-- Note that nested routes automatically inherit all tags from the parent.
|
|
--
|
|
-- Admins always have access to entities within their assigned schools.
|
|
--
|
|
-- Access Tags:
|
|
-- !free -- free for all
|
|
-- !lecturer -- lecturer for this course (or the school, if route is not connected to a course)
|
|
-- !corrector -- corrector for this sheet (or the submission, if route is connected to a submission, or the course, if route is not connected to a sheet, or any course, if route is not connected to a course)
|
|
-- !registered -- participant for this course (no effect outside of courses)
|
|
-- !owner -- part of the group of owners of this submission
|
|
-- !capacity -- course this route is associated with has at least one unit of participant capacity
|
|
--
|
|
-- !materials -- only if course allows all materials to be free (no meaning outside of courses)
|
|
-- !time -- access depends on time somehow
|
|
-- !isRead -- only if it is read-only access (i.e. GET but not POST)
|
|
-- !isWrite -- only if it is write access (i.e. POST only) why needed???
|
|
--
|
|
-- !deprecated -- like free, but logs and gives a warning; entirely disabled in production
|
|
--
|
|
|
|
/static StaticR Static appStatic !free
|
|
/auth AuthR Auth getAuth !free
|
|
|
|
/favicon.ico FaviconR GET !free
|
|
/robots.txt RobotsR GET !free
|
|
|
|
/ HomeR GET !free
|
|
/users UsersR GET -- no tags, i.e. admins only
|
|
/admin/test AdminTestR GET POST
|
|
/admin/user/#CryptoUUIDUser AdminUserR GET
|
|
/info VersionR GET !free
|
|
|
|
/profile ProfileR GET POST !free !free
|
|
/profile/data ProfileDataR GET !free !free
|
|
|
|
/terms TermShowR GET !free
|
|
/terms/current TermCurrentR GET !free
|
|
/terms/edit TermEditR GET POST
|
|
/terms/#TermId/edit TermEditExistR GET
|
|
!/terms/#TermId TermCourseListR GET !free
|
|
|
|
-- For Pattern Synonyms see Foundation
|
|
/course/ CourseListR GET !free
|
|
!/course/new CourseNewR GET POST !lecturer
|
|
/course/#TermId/#Text CourseR !lecturer:
|
|
/ CShowR GET !free
|
|
/register CRegisterR POST !timeANDcapacity
|
|
/edit CEditR GET POST
|
|
/subs CCorrectionsR GET POST
|
|
/ex SheetListR GET !registered !materials
|
|
!/ex/new SheetNewR GET POST
|
|
/ex/#Text SheetR:
|
|
/ SShowR GET !timeANDregistered !timeANDmaterials !corrector
|
|
/edit SEditR GET POST
|
|
/delete SDelR GET POST
|
|
/subs SSubsR GET POST
|
|
/subs/new SubmissionNewR GET POST !timeANDregistered
|
|
/subs/own SubmissionOwnR GET !free -- just redirect
|
|
/sub/#CryptoFileNameSubmission SubmissionR !corrector:
|
|
/ SubShowR GET POST !ownerANDtime !ownerANDisRead
|
|
/archive/#{ZIPArchiveName SubmissionFileType} SubArchiveR GET !owner
|
|
/correction CorrectionR GET POST !ownerANDisRead
|
|
!/#SubmissionFileType/*FilePath SubDownloadR GET !owner
|
|
/correctors SCorrR GET POST
|
|
!/#SheetFileType/*FilePath SFileR GET !timeANDregistered !timeANDmaterials !corrector
|
|
|
|
/corrections CorrectionsR GET POST !corrector !lecturer
|
|
/corrections/upload CorrectionsUploadR GET POST !corrector !lecturer
|
|
|
|
|
|
!/#UUID CryptoUUIDDispatchR GET !free -- just redirect
|
|
-- !/*{CI FilePath} CryptoFileNameDispatchR GET !free -- Disabled until preliminary check for valid cID exists
|