News grants (Wave 17)

OP OpenVibers committed 23 Sept 2026 · 80b02c6a92 · 1 file, +6 −0
Changes

ddiff --git a/server/identity/principals.js b/server/identity/principals.js
iindex 4ba9ca34..a3c2f6a1 100644
---- a/server/identity/principals.js
++++ b/server/identity/principals.js
@@@ -73,6 +73,12 @@ const DEFAULT_GRANTS = [
      ['reviews', 'events.event.publish', 'openvibe.events', []],
      ['reviews', 'events.subscription.manage', 'openvibe.events', []],
      ['reviews', 'community.comment.write', 'openvibe.community', []],
++    // Wave 17: News reads Sources news items (and follows them and fetch failures by event).
++    ['news', 'sources.item.read', 'openvibe.sources', []],
++    ['news', 'sources.source.read', 'openvibe.sources', []],
++    ['news', 'events.event.publish', 'openvibe.events', []],
++    ['news', 'events.subscription.manage', 'openvibe.events', []],
++    ['news', 'identity.subject.resolve', SELF_AUDIENCE, []],
      // Wave 3: producers publish to OpenVibe.Events (their own source only, enforced by Events).
      ...['live', 'media', 'network', 'community', 'billing', 'chat', 'tools', 'games', 'search', 'sources', 'tips'].map(c => [c, 'events.event.publish', 'openvibe.events', []]),
      // Wave 14: Search subscribes to <owner>.index_document.* deliveries.