hydra-access-controls 0.0.2 → 0.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (43) hide show
  1. data/.gitignore +1 -0
  2. data/.gitmodules +3 -0
  3. data/.rspec +2 -0
  4. data/Gemfile +6 -0
  5. data/README.textile +100 -0
  6. data/Rakefile +6 -3
  7. data/config/fedora.yml +8 -0
  8. data/config/jetty.yml +5 -0
  9. data/config/solr.yml +6 -0
  10. data/hydra-access-controls.gemspec +3 -2
  11. data/lib/ability.rb +1 -0
  12. data/lib/hydra-access-controls.rb +10 -0
  13. data/lib/hydra-access-controls/version.rb +1 -1
  14. data/lib/hydra/ability.rb +14 -13
  15. data/lib/hydra/access_controls_enforcement.rb +27 -16
  16. data/lib/hydra/admin_policy.rb +81 -0
  17. data/lib/hydra/datastream.rb +1 -0
  18. data/lib/hydra/datastream/inheritable_rights_metadata.rb +22 -0
  19. data/lib/hydra/policy_aware_ability.rb +128 -0
  20. data/lib/hydra/policy_aware_access_controls_enforcement.rb +70 -0
  21. data/lib/hydra/role_mapper_behavior.rb +16 -2
  22. data/lib/hydra/user.rb +42 -0
  23. data/lib/tasks/hydra-access-controls.rake +18 -0
  24. data/lib/tasks/hydra_jetty.rake +55 -0
  25. data/solr_conf/conf/schema.xml +124 -0
  26. data/solr_conf/conf/solrconfig.xml +329 -0
  27. data/solr_conf/solr.xml +35 -0
  28. data/spec/factories.rb +101 -0
  29. data/spec/spec_helper.rb +28 -0
  30. data/spec/support/blacklight.rb +7 -0
  31. data/spec/support/config/solr.yml +4 -0
  32. data/spec/support/mods_asset.rb +4 -1
  33. data/spec/support/rails.rb +10 -0
  34. data/spec/support/solr_document.rb +13 -0
  35. data/spec/support/user.rb +32 -0
  36. data/spec/unit/ability_spec.rb +338 -56
  37. data/spec/unit/access_controls_enforcement_spec.rb +180 -0
  38. data/spec/unit/admin_policy_spec.rb +89 -0
  39. data/spec/unit/inheritable_rights_metadata_spec.rb +66 -0
  40. data/spec/unit/policy_aware_ability_spec.rb +92 -0
  41. data/spec/unit/policy_aware_access_controls_enforcement_spec.rb +109 -0
  42. metadata +59 -4
  43. data/README.md +0 -29
@@ -0,0 +1,329 @@
1
+ <?xml version="1.0" encoding="UTF-8" ?>
2
+ <config>
3
+ <!-- For complete comments from the Solr project example solrconfig.xml:
4
+ http://svn.apache.org/repos/asf/lucene/dev/trunk/solr/example/solr/conf/solrconfig.xml
5
+ See also:
6
+ http://wiki.apache.org/solr/SolrConfigXml
7
+ -->
8
+ <abortOnConfigurationError>${solr.abortOnConfigurationError:true}</abortOnConfigurationError>
9
+
10
+ <indexDefaults>
11
+ <useCompoundFile>false</useCompoundFile>
12
+ <mergeFactor>10</mergeFactor>
13
+ <ramBufferSizeMB>32</ramBufferSizeMB>
14
+ <maxMergeDocs>2147483647</maxMergeDocs>
15
+ <maxFieldLength>10000</maxFieldLength>
16
+ <writeLockTimeout>1000</writeLockTimeout>
17
+ <commitLockTimeout>10000</commitLockTimeout>
18
+ <lockType>single</lockType>
19
+ </indexDefaults>
20
+
21
+ <mainIndex>
22
+ <useCompoundFile>false</useCompoundFile>
23
+ <ramBufferSizeMB>32</ramBufferSizeMB>
24
+ <mergeFactor>10</mergeFactor>
25
+ <maxMergeDocs>2147483647</maxMergeDocs>
26
+ <maxFieldLength>10000</maxFieldLength>
27
+ <unlockOnStartup>false</unlockOnStartup>
28
+ </mainIndex>
29
+
30
+ <jmx />
31
+
32
+ <!-- the default high-performance update handler -->
33
+ <updateHandler class="solr.DirectUpdateHandler2">
34
+ </updateHandler>
35
+
36
+
37
+ <query>
38
+ <maxBooleanClauses>1024</maxBooleanClauses>
39
+ <filterCache class="solr.LRUCache"
40
+ size="512"
41
+ initialSize="512"
42
+ autowarmCount="128"/>
43
+ <queryResultCache class="solr.LRUCache"
44
+ size="512"
45
+ initialSize="512"
46
+ autowarmCount="32"/>
47
+ <documentCache class="solr.LRUCache"
48
+ size="512"
49
+ initialSize="512"
50
+ autowarmCount="0"/>
51
+ <enableLazyFieldLoading>true</enableLazyFieldLoading>
52
+ <queryResultWindowSize>50</queryResultWindowSize>
53
+ <queryResultMaxDocsCached>200</queryResultMaxDocsCached>
54
+ <HashDocSet maxSize="3000" loadFactor="0.75"/>
55
+
56
+ <listener event="newSearcher" class="solr.QuerySenderListener">
57
+ <arr name="queries">
58
+ <lst> <str name="q">hydrus</str></lst>
59
+ </arr>
60
+ </listener>
61
+
62
+ <listener event="firstSearcher" class="solr.QuerySenderListener">
63
+ <arr name="queries">
64
+ <lst> <str name="q">hydrus</str></lst>
65
+ </arr>
66
+ </listener>
67
+
68
+ <useColdSearcher>false</useColdSearcher>
69
+ <maxWarmingSearchers>2</maxWarmingSearchers>
70
+ </query>
71
+
72
+ <requestDispatcher handleSelect="true" >
73
+ <requestParsers enableRemoteStreaming="false" multipartUploadLimitInKB="2048" />
74
+ <httpCaching lastModifiedFrom="openTime"
75
+ etagSeed="Solr">
76
+ </httpCaching>
77
+ </requestDispatcher>
78
+
79
+ <requestHandler name="standard" class="solr.SearchHandler">
80
+ <lst name="defaults">
81
+ <str name="echoParams">explicit</str>
82
+ </lst>
83
+ </requestHandler>
84
+
85
+ <!-- For complete comments from the Solr project example solrconfig.xml:
86
+ http://svn.apache.org/repos/asf/lucene/dev/trunk/solr/example/solr/conf/solrconfig.xml
87
+ See also:
88
+ http://wiki.apache.org/solr/SolrConfigXml
89
+ -->
90
+
91
+ <requestHandler name="search" class="solr.SearchHandler" default="true">
92
+ <lst name="defaults">
93
+ <str name="defType">dismax</str>
94
+ <!-- dismax params -->
95
+ <str name="mm"> 2&lt;-1 5&lt;-2 6&lt;90% </str>
96
+ <str name="q.alt">*:*</str>
97
+ <!-- general -->
98
+ <str name="facet">true</str>
99
+ <str name="facet.mincount">1</str>
100
+ <str name="echoParams">explicit</str>
101
+ <str name="fl">
102
+ id,title_t,title_display,date_t,year_facet,month_facet,has_model_s,has_collection_member_s,is_part_of_s,system_create_dt,
103
+ person_0_role_t,person_1_role_t,person_2_role_t,person_3_role_t,person_4_role_t,person_5_role_t,person_6_role_t,
104
+ person_7_role_t,person_8_role_t,person_9_role_t,
105
+ person_0_first_name_t,person_1_first_name_t,person_2_first_name_t,person_3_first_name_t,person_4_first_name_t,
106
+ person_5_first_name_t,person_6_first_name_t,person_7_first_name_t,person_8_first_name_t,person_9_first_name_t,
107
+ person_0_last_name_t,person_1_last_name_t,person_2_last_name_t,person_3_last_name_t,person_4_last_name_t,
108
+ person_5_last_name_t,person_6_last_name_t,person_7_last_name_t,person_8_last_name_t,person_9_last_name_t,
109
+ status_t,subject_t,depositor_t,
110
+ journal_title_info_t,journal_issue_publication_date_t,
111
+ journal_issue_pages_end_t,journal_issue_volume_t,journal_title_info_main_title_t,journal_issue_pages_start_t,
112
+ journal_issue_start_page_t, journal_issue_end_page_t, abstract_t,
113
+ person_0_institution_t,person_1_institution_t,person_2_institution_t,person_3_institution_t,person_4_institution_t,person_5_institution_t,person_institution_role_t,
114
+ person_7_institution_t,person_8_institution_t,person_9_institution_t,
115
+ mods_gps_t, mods_region_t, mods_site_t, mods_ecosystem_t,
116
+ mods_timespan_start_t, mods_timespan_end_t, description_t, mods_title_info_main_title_t, mods_0_title_info_0_main_title_t, embargo_release_date_dt, note_t,
117
+ object_type_facet, department_facet, peer_reviewed_facet
118
+ </str>
119
+ </lst>
120
+ </requestHandler>
121
+
122
+ <requestHandler name="public_search" class="solr.SearchHandler" >
123
+ <lst name="defaults">
124
+ <!-- Making defType lucene to exclude file assets -->
125
+ <str name="defType">lucene</str>
126
+ <!-- lucene params -->
127
+ <str name="df">has_model_s</str>
128
+ <str name="q.op">AND</str>
129
+ <!-- dismax params -->
130
+ <str name="mm"> 2&lt;-1 5&lt;-2 6&lt;90% </str>
131
+ <str name="q.alt">*:*</str>
132
+ <str name="qf_dismax">id^0.8 id_t^0.8 format text^0.3</str>
133
+ <str name="pf_dismax">id^0.9 id_t^0.9 text^0.5</str>
134
+ <int name="ps">100</int>
135
+ <float name="tie">0.01</float>
136
+ <!-- general -->
137
+ <str name="facet">on</str>
138
+ <str name="facet.mincount">1</str>
139
+ <str name="echoParams">explicit</str>
140
+ <str name="fl">
141
+ id,text,title_t,date_t,year_facet,month_facet,medium_t,series_facet,box_facet,folder_facet,has_model_s,has_collection_member_s,system_create_dt,
142
+ person_0_role_t,person_1_role_t,person_2_role_t,person_3_role_t,person_4_role_t,person_5_role_t,person_6_role_t,person_7_role_t,person_8_role_t,person_9_role_t,
143
+ person_0_first_name_t,person_1_first_name_t,person_2_first_name_t,person_3_first_name_t,person_4_first_name_t,person_5_first_name_t,person_6_first_name_t,person_7_first_name_t,person_8_first_name_t,person_9_first_name_t,
144
+ person_0_last_name_t,person_1_last_name_t,person_2_last_name_t,person_3_last_name_t,person_4_last_name_t,person_5_last_name_t,person_6_last_name_t,person_7_last_name_t,person_8_last_name_t,person_9_last_name_t,depositor_t,
145
+
146
+ journal_title_info_t, journal_title_info_main_title_t, journal_issue_publication_date_t, journal_issue_pages_start_t, journal_issue_pages_end_t, journal_issue_volume_t, journal_issue_start_page_t, journal_issue_end_page_t, abstract_t,
147
+ person_0_institution_t,person_1_institution_t,person_2_institution_t,person_3_institution_t,person_4_institution_t,person_5_institution_t,person_institution_role_t,
148
+ person_7_institution_t,person_8_institution_t,person_9_institution_t,
149
+ mods_gps_t, mods_region_t, mods_site_t, mods_ecosystem_t,
150
+ mods_timespan_start_t, mods_timespan_end_t, description_t, mods_title_info_t,mods_0_title_info_0_main_title_t, embargo_release_date_dt, note_t,
151
+ object_type_facet, department_facet, peer_reviewed_facet
152
+ </str>
153
+ </lst>
154
+ </requestHandler>
155
+
156
+ <requestHandler name="fulltext" class="solr.SearchHandler" >
157
+ <lst name="defaults">
158
+ <str name="defType">dismax</str>
159
+ <str name="facet">on</str>
160
+ <str name="facet.mincount">1</str>
161
+ <str name="echoParams">explicit</str>
162
+ <float name="tie">0.01</float>
163
+ <str name="qf">id^0.8 id_t^0.8 format text^0.3</str>
164
+ <str name="pf">id^0.9 id_t^0.9 text^0.5</str>
165
+ <str name="fl">
166
+ id,text,title_t,date_t,year_facet,month_facet,medium_t,series_facet,box_facet,folder_facet
167
+ </str>
168
+ <str name="mm"> 2&lt;-1 5&lt;-2 6&lt;90% </str>
169
+ <int name="ps">100</int>
170
+ <str name="q.alt">*:*</str>
171
+ </lst>
172
+ </requestHandler>
173
+
174
+ <!--
175
+ Hydra Permissions request Handler
176
+ For requests to get just the permissions related info about a document
177
+ -->
178
+ <requestHandler name="permissions" class="solr.SearchHandler" >
179
+ <lst name="defaults">
180
+ <str name="facet">off</str>
181
+ <str name="echoParams">all</str>
182
+ <str name="rows">1</str>
183
+ <str name="q">{!raw f=id v=$id}</str> <!-- use id=666 instead of q=id:666 -->
184
+ <str name="fl">
185
+ id,access_t,
186
+ discover_access_group_t,discover_access_person_t,
187
+ read_access_group_t,read_access_person_t,
188
+ edit_access_group_t,edit_access_person_t,
189
+ depositor_t,
190
+ embargo_release_date_dt
191
+ inheritable_access_t,
192
+ inheritable_discover_access_group_t,inheritable_discover_access_person_t,
193
+ inheritable_read_access_group_t,inheritable_read_access_person_t,
194
+ inheritable_edit_access_group_t,inheritable_edit_access_person_t,
195
+ inheritable_embargo_release_date_dt
196
+ </str>
197
+ </lst>
198
+ </requestHandler>
199
+
200
+ <!-- for requests to get a single document; use id=666 instead of q=id:666 -->
201
+ <requestHandler name="document" class="solr.SearchHandler" >
202
+ <lst name="defaults">
203
+ <str name="echoParams">all</str>
204
+ <str name="fl">*</str>
205
+ <str name="rows">1</str>
206
+ <str name="q">{!raw f=id v=$id}</str> <!-- use id=666 instead of q=id:666 -->
207
+
208
+ <!-- facets on for a single document response??? -->
209
+ <str name="facet">on</str>
210
+ <str name="facet.mincount">1</str>
211
+
212
+ <str name="facet.field">collection_facet</str>
213
+ <str name="facet.field">technology_facet</str>
214
+ <str name="facet.field">person_facet</str>
215
+ <!-- <str name="facet.field">title_t</str> -->
216
+ <str name="facet.field">city_facet</str>
217
+ <str name="facet.field">organization_facet</str>
218
+ <str name="facet.field">company_facet</str>
219
+ <str name="facet.field">year_facet</str>
220
+ <str name="facet.field">state_facet</str>
221
+ <str name="facet.field">series_facet</str>
222
+ <str name="facet.field">box_facet</str>
223
+ <str name="facet.field">folder_facet</str>
224
+ <str name="facet.field">donor_tags_facet</str>
225
+ <str name="facet.field">archivist_tags_facet</str>
226
+
227
+ </lst>
228
+ </requestHandler>
229
+
230
+ <!-- The spell check component can return a list of alternative spelling
231
+ suggestions. -->
232
+ <searchComponent name="spellcheck" class="solr.SpellCheckComponent">
233
+
234
+ <str name="queryAnalyzerFieldType">textSpell</str>
235
+
236
+ <lst name="spellchecker">
237
+ <str name="name">default</str>
238
+ <str name="field">spell</str>
239
+ <str name="spellcheckIndexDir">./spellchecker1</str>
240
+
241
+ </lst>
242
+ <lst name="spellchecker">
243
+ <str name="name">jarowinkler</str>
244
+ <str name="field">spell</str>
245
+ <!-- Use a different Distance Measure -->
246
+ <str name="distanceMeasure">org.apache.lucene.search.spell.JaroWinklerDistance</str>
247
+ <str name="spellcheckIndexDir">./spellchecker2</str>
248
+
249
+ </lst>
250
+
251
+ <lst name="spellchecker">
252
+ <str name="classname">solr.FileBasedSpellChecker</str>
253
+ <str name="name">file</str>
254
+ <str name="sourceLocation">spellings.txt</str>
255
+ <str name="characterEncoding">UTF-8</str>
256
+ <str name="spellcheckIndexDir">./spellcheckerFile</str>
257
+ </lst>
258
+ </searchComponent>
259
+
260
+ <!-- a request handler utilizing the spellcheck component -->
261
+ <requestHandler name="/spellCheckCompRH" class="solr.SearchHandler">
262
+ <lst name="defaults">
263
+ <!-- omp = Only More Popular -->
264
+ <str name="spellcheck.onlyMorePopular">false</str>
265
+ <!-- exr = Extended Results -->
266
+ <str name="spellcheck.extendedResults">false</str>
267
+ <!-- The number of suggestions to return -->
268
+ <str name="spellcheck.count">1</str>
269
+ </lst>
270
+ <arr name="last-components">
271
+ <str>spellcheck</str>
272
+ </arr>
273
+ </requestHandler>
274
+
275
+ <!-- a search component that enables you to configure the top results for
276
+ a given query regardless of the normal lucene scoring.-->
277
+ <searchComponent name="elevator" class="solr.QueryElevationComponent" >
278
+ <!-- pick a fieldType to analyze queries -->
279
+ <str name="queryFieldType">string</str>
280
+ <str name="config-file">elevate.xml</str>
281
+ </searchComponent>
282
+
283
+ <!-- a request handler utilizing the elevator component -->
284
+ <requestHandler name="/elevate" class="solr.SearchHandler" startup="lazy">
285
+ <lst name="defaults">
286
+ <str name="echoParams">explicit</str>
287
+ </lst>
288
+ <arr name="last-components">
289
+ <str>elevator</str>
290
+ </arr>
291
+ </requestHandler>
292
+
293
+ <requestHandler name="/update" class="solr.XmlUpdateRequestHandler" />
294
+ <requestHandler name="/analysis" class="solr.AnalysisRequestHandler" />
295
+ <requestHandler name="/update/csv" class="solr.CSVRequestHandler" startup="lazy" />
296
+ <requestHandler name="/admin/" class="org.apache.solr.handler.admin.AdminHandlers" />
297
+ <requestHandler name="/admin/ping" class="PingRequestHandler">
298
+ <lst name="defaults">
299
+ <str name="qt">standard</str>
300
+ <str name="q">solrpingquery</str>
301
+ <str name="echoParams">all</str>
302
+ </lst>
303
+ </requestHandler>
304
+ <requestHandler name="/debug/dump" class="solr.DumpRequestHandler" >
305
+ <lst name="defaults">
306
+ <str name="echoParams">explicit</str> <!-- for all params (including the default etc) use: 'all' -->
307
+ <str name="echoHandler">true</str>
308
+ </lst>
309
+ </requestHandler>
310
+
311
+ <!--
312
+ <queryResponseWriter name="xml" class="org.apache.solr.request.XMLResponseWriter" default="true"/>
313
+ <queryResponseWriter name="json" class="org.apache.solr.request.JSONResponseWriter"/>
314
+ <queryResponseWriter name="ruby" class="org.apache.solr.request.RubyResponseWriter"/>
315
+ -->
316
+
317
+ <!-- XSLT response writer transforms the XML output by any xslt file found
318
+ in Solr's conf/xslt directory. Changes to xslt files are checked for
319
+ every xsltCacheLifetimeSeconds.
320
+ -->
321
+ <queryResponseWriter name="xslt" class="org.apache.solr.request.XSLTResponseWriter">
322
+ <int name="xsltCacheLifetimeSeconds">5</int>
323
+ </queryResponseWriter>
324
+
325
+ <admin>
326
+ <defaultQuery>hydra</defaultQuery>
327
+ </admin>
328
+
329
+ </config>
@@ -0,0 +1,35 @@
1
+ <?xml version="1.0" encoding="UTF-8" ?>
2
+ <!--
3
+ Licensed to the Apache Software Foundation (ASF) under one or more
4
+ contributor license agreements. See the NOTICE file distributed with
5
+ this work for additional information regarding copyright ownership.
6
+ The ASF licenses this file to You under the Apache License, Version 2.0
7
+ (the "License"); you may not use this file except in compliance with
8
+ the License. You may obtain a copy of the License at
9
+
10
+ http://www.apache.org/licenses/LICENSE-2.0
11
+
12
+ Unless required by applicable law or agreed to in writing, software
13
+ distributed under the License is distributed on an "AS IS" BASIS,
14
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15
+ See the License for the specific language governing permissions and
16
+ limitations under the License.
17
+ -->
18
+
19
+ <!--
20
+ All (relative) paths are relative to the installation path
21
+
22
+ persistent: Save changes made via the API to this file
23
+ sharedLib: path to a lib directory that will be shared across all cores
24
+ -->
25
+ <solr persistent="false">
26
+
27
+ <!--
28
+ adminPath: RequestHandler path to manage cores.
29
+ If 'null' (or absent), cores will not be manageable via REST
30
+ -->
31
+ <cores adminPath="/admin/cores">
32
+ <core name="core0" instanceDir="core0" />
33
+ <core name="core1" instanceDir="core1" />
34
+ </cores>
35
+ </solr>
data/spec/factories.rb ADDED
@@ -0,0 +1,101 @@
1
+ FactoryGirl.define do
2
+
3
+ # Users
4
+
5
+ # Prototype user factory
6
+ factory :user, :aliases => [:owner] do |u|
7
+ sequence :uid do |n|
8
+ "person#{n}"
9
+ end
10
+ email { "#{uid}@example.com" }
11
+ password { uid }
12
+ new_record false
13
+ end
14
+
15
+ factory :archivist, :parent=>:user do |u|
16
+ uid 'archivist1'
17
+ password 'archivist1'
18
+ end
19
+ factory :registered_user, :parent=>:user do |u|
20
+ uid 'registered_user'
21
+ password 'registered_user'
22
+ end
23
+ factory :staff, :parent=>:user do |u|
24
+ uid 'staff1'
25
+ password 'staff1'
26
+ roles { ["staff"] }
27
+ end
28
+ factory :student, :parent=>:user do |u|
29
+ uid 'student1'
30
+ password 'student1'
31
+ roles { ["student"] }
32
+ end
33
+ factory :joe_creator, :parent=>:user do |u|
34
+ uid 'joe_creator'
35
+ password 'joe_creator'
36
+ roles { ["faculty"] }
37
+ end
38
+ factory :martia_morocco, :parent=>:user do |u|
39
+ uid 'martia_morocco'
40
+ password 'martia_morocco'
41
+ roles { ["faculty", "africana-faculty"] }
42
+ end
43
+ factory :ira_instructor, :parent=>:user do |u|
44
+ uid 'ira_instructor'
45
+ password 'ira_instructor'
46
+ roles { ["faculty", "africana-faculty"] }
47
+ end
48
+ factory :calvin_collaborator, :parent=>:user do |u|
49
+ uid 'calvin_collaborator'
50
+ password 'calvin_collaborator'
51
+ roles { ["student"] }
52
+ end
53
+ factory :sara_student, :parent=>:user do |u|
54
+ uid 'sara_student'
55
+ password 'sara_student'
56
+ roles { ["student", "africana-104-students"] }
57
+ end
58
+ factory :louis_librarian, :parent=>:user do |u|
59
+ uid 'louis_librarian'
60
+ password 'louis_librarian'
61
+ roles { ["library-staff", "repository-admin"] }
62
+ end
63
+ factory :carol_curator, :parent=>:user do |u|
64
+ uid 'carol_curator'
65
+ password 'carol_curator'
66
+ roles { ["library-staff", "repository-admin"] }
67
+ end
68
+ factory :alice_admin, :parent=>:user do |u|
69
+ uid 'alice_admin'
70
+ password 'alice_admin'
71
+ roles { ["repository-admin"] }
72
+ end
73
+
74
+ #
75
+ # Repository Objects
76
+ #
77
+
78
+ factory :asset, :class => ModsAsset do |o|
79
+ end
80
+
81
+ factory :admin_policy, :class => Hydra::AdminPolicy do |o|
82
+ end
83
+
84
+ factory :default_access_asset, :parent=>:asset do |a|
85
+ permissions [{:name=>"joe_creator", :access=>"edit", :type=>"user"}]
86
+ end
87
+
88
+ factory :dept_access_asset, :parent=>:asset do |a|
89
+ permissions [{:name=>"africana-faculty", :access=>"read", :type=>"group"}, {:name=>"joe_creator", :access=>"edit", :type=>"user"}]
90
+ end
91
+
92
+ factory :org_read_access_asset, :parent=>:asset do |a|
93
+ permissions [{:name=>"registered", :access=>"read", :type=>"group"}, {:name=>"joe_creator", :access=>"edit", :type=>"user"}, {:name=>"calvin_collaborator", :access=>"edit", :type=>"user"}]
94
+ end
95
+
96
+ factory :open_access_asset, :parent=>:asset do |a|
97
+ permissions [{:name=>"public", :access=>"read", :type=>"group"}, {:name=>"joe_creator", :access=>"edit", :type=>"user"}, {:name=>"calvin_collaborator", :access=>"edit", :type=>"user"}]
98
+ end
99
+
100
+ end
101
+