MGS-6061 POC : per attribute permission with taxonomy

repository-data/application/src/main/resources/hcm-config/collections/custom-collections-domain.yaml

@@ -10,9 +10,9 @@ definitions:
         hipposys:groups:
           .meta:category: system
           .meta:add-new-system-values: true
-          value: [mygov-editors, trading-nation-editors, economic-action-plan-editors]
+          value: [mygov-editors, trading-nation-editors, economic-action-plan-editors, social-security-editors]
       /readwrite:
         hipposys:groups:
           .meta:category: system
           .meta:add-new-system-values: true
-          value: [mygov-editors, trading-nation-editors, economic-action-plan-editors]
+          value: [mygov-editors, trading-nation-editors, economic-action-plan-editors, social-security-editors]

repository-data/application/src/main/resources/hcm-config/configuration/domains/social-security-content.yaml

@@ -0,0 +1,55 @@
+definitions:
+  config:
+    /hippo:configuration/hippo:domains/social-security-content:
+      jcr:primaryType: hipposys:domain
+      /content-domain:
+        jcr:primaryType: hipposys:domainrule
+        /include-social-security-documents:
+          jcr:primaryType: hipposys:facetrule
+          hipposys:equals: true
+          hipposys:facet: hippotaxonomy:keys
+          hipposys:filter: false
+          hipposys:type: String
+          hipposys:value: social-security-directorate
+      /editor:
+        jcr:primaryType: hipposys:authrole
+        hipposys:groups:
+          .meta:category: system
+          .meta:add-new-system-values: true
+          type: string
+          value: [social-security-editors]
+        hipposys:role: editor
+        hipposys:users:
+          .meta:category: system
+          .meta:add-new-system-values: true
+          operation: override
+          type: string
+          value: []
+      /include-non-variant-nodes:
+        jcr:primaryType: hipposys:domainrule
+        /include-non-variant-nodes:
+          jcr:primaryType: hipposys:facetrule
+          hipposys:equals: false
+          hipposys:facet: nodetype
+          hipposys:type: String
+          hipposys:value: hippostd:publishable
+        /exclude-value-lists:
+          jcr:primaryType: hipposys:facetrule
+          hipposys:equals: false
+          hipposys:facet: nodetype
+          hipposys:type: String
+          hipposys:value: selection:valuelist
+        /content-and-descendants:
+          jcr:primaryType: hipposys:facetrule
+          hipposys:equals: true
+          hipposys:facet: jcr:path
+          hipposys:type: Reference
+          hipposys:value: /content
+      /include-taxonomy-nodes:
+        jcr:primaryType: hipposys:domainrule
+        /include-non-variant-nodes:
+          jcr:primaryType: hipposys:facetrule
+          hipposys:equals: true
+          hipposys:facet: nodetype
+          hipposys:type: String
+          hipposys:value: hippotaxonomy:taxonomy

repository-data/application/src/main/resources/hcm-config/configuration/domains/tags-plugin.yaml

@@ -19,7 +19,7 @@ definitions:
           .meta:add-new-system-values: true
           operation: override
           type: string
-          value: [economic-action-plan-authors, economic-action-plan-editors, mygov-authors, mygov-editors, trading-nation-authors, trading-nation-editors]
+          value: [economic-action-plan-authors, economic-action-plan-editors, mygov-authors, mygov-editors, trading-nation-authors, trading-nation-editors, social-security-editors]
         hipposys:role: readwrite
         hipposys:userrole:
           .meta:category: system

repository-data/application/src/main/resources/hcm-config/configuration/groups/social-security-editor.yaml

@@ -0,0 +1,7 @@
+definitions:
+  config:
+    /hippo:configuration/hippo:users/social-security-editor:
+      jcr:primaryType: hipposys:user
+      hipposys:active: true
+      hipposys:password: editor
+      hipposys:securityprovider: internal

repository-data/application/src/main/resources/hcm-config/configuration/groups/social-security-editors.yaml

@@ -0,0 +1,16 @@
+definitions:
+  config:
+    /hippo:configuration/hippo:groups/social-security-editors:
+      jcr:primaryType: hipposys:group
+      hipposys:members:
+        .meta:category: system
+        .meta:add-new-system-values: true
+        type: string
+        value: [social-security-editor]
+      hipposys:securityprovider: internal
+      hipposys:userroles:
+        .meta:category: system
+        .meta:add-new-system-values: true
+        type: string
+        value: [xm.cms.user, xm.content.user, xm.channel.user, xm.report.user, xm.dashboard.user,
+          xm.channel.webmaster]

repository-data/application/src/main/resources/hcm-config/configuration/queries/templates/new-publishing-category.yaml

@@ -28,7 +28,7 @@ definitions:
             hippo:name: index
             /index[1]:
               jcr:primaryType: publishing:category
-              jcr:mixinTypes: ['mix:versionable', 'hippostd:taggable']
+              jcr:mixinTypes: ['mix:versionable', 'hippostd:taggable', 'hippotaxonomy:classifiable']
               jcr:uuid: 9b74a104-199d-4155-af9e-07b188619786
               hippo:availability: [preview]
               hippostd:state: unpublished

repository-data/application/src/main/resources/hcm-config/namespaces/publishing/category.yaml

@@ -13,8 +13,8 @@ definitions:
           jcr:mixinTypes: ['mix:referenceable', 'hipposysedit:remodel']
           jcr:uuid: ee247b17-f344-47f8-a72f-ead862d09f16
           hipposysedit:node: true
-          hipposysedit:supertype: ['publishing:base', 'hippostd:relaxed', 'hippotranslation:translated',
-            'hippostd:taggable']
+          hipposysedit:supertype: ['publishing:base', 'hippostd:taggable', 'hippotranslation:translated',
+            'hippotaxonomy:classifiable', 'hippostd:relaxed']
           hipposysedit:uri: http://www.publishing.com/publishing/nt/1.0
           /heroimage:
             jcr:primaryType: hipposysedit:field
@@ -78,7 +78,7 @@ definitions:
           hippotranslation:locale: document-type-locale
           publishing:summary: ''
           publishing:title: ''
-          jcr:mixinTypes: ['mix:referenceable', 'hippostd:taggable']
+          jcr:mixinTypes: ['mix:referenceable', 'hippostd:taggable', 'hippotaxonomy:classifiable']
           jcr:uuid: 706ae1bb-4049-4a77-9b78-89be2f2aea8d
           hippostdpubwf:lastModificationDate: 2019-09-03T14:51:59.186+01:00
           hippostdpubwf:creationDate: 2019-09-03T14:51:59.186+01:00
@@ -294,3 +294,12 @@ definitions:
             wicket.id: ${cluster.id}.field
             /cluster.options:
               jcr:primaryType: frontend:pluginconfig
+          /classifiable:
+            jcr:primaryType: frontend:plugin
+            essentials-taxonomy-name: orgs
+            mixin: hippotaxonomy:classifiable
+            plugin.class: org.hippoecm.frontend.editor.plugins.mixin.MixinLoaderPlugin
+            wicket.id: ${cluster.id}.field
+            /cluster.options:
+              jcr:primaryType: frontend:pluginconfig
+              taxonomy.name: orgs

repository-data/application/src/main/resources/hcm-content/content/documents/mygov/brexit.yaml

@@ -13,17 +13,19 @@
     hippo:versionHistory: aa64300a-070b-42d7-b381-af5557c2c19b
     /index[1]:
       jcr:primaryType: publishing:category
-      jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'mix:versionable']
+      jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'hippotaxonomy:classifiable',
+        'mix:versionable']
       jcr:uuid: fe9f20a4-28d3-4985-bd52-cf215f43c330
       hippo:availability: [preview]
       hippo:name: Brexit
       hippostd:state: unpublished
       hippostd:tags: []
       hippostdpubwf:createdBy: system
       hippostdpubwf:creationDate: 2020-08-17T16:42:24.019+01:00
-      hippostdpubwf:lastModificationDate: 2020-08-17T16:42:24.237+01:00
-      hippostdpubwf:lastModifiedBy: system
-      hippotranslation:id: 7b1bfa2f-b3b8-5b82-be09-e6737b2ffb6f
+      hippostdpubwf:lastModificationDate: 2020-09-10T18:34:17.540+03:00
+      hippostdpubwf:lastModifiedBy: social-security-editor
+      hippotaxonomy:keys: [social-security-directorate]
+      hippotranslation:id: 7b1bfa2f-b3b8-4f61-be09-e6737b2ffb6f
       hippotranslation:locale: document-type-locale
       publishing:authorNotes: ''
       publishing:lifeEvents: brexit
@@ -50,17 +52,19 @@
         jcr:primaryType: publishing:relateditems
     /index[2]:
       jcr:primaryType: publishing:category
-      jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'mix:referenceable']
+      jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'hippotaxonomy:classifiable',
+        'mix:referenceable']
       jcr:uuid: 31168100-1d2f-4c08-8937-bbbd1f98e1be
       hippo:availability: []
       hippo:name: Brexit
       hippostd:state: draft
       hippostd:tags: []
       hippostdpubwf:createdBy: system
       hippostdpubwf:creationDate: 2020-08-17T16:42:24.019+01:00
-      hippostdpubwf:lastModificationDate: 2020-08-17T16:42:24.168+01:00
-      hippostdpubwf:lastModifiedBy: system
-      hippotranslation:id: 7b1bfa2f-b3b8-5b82-be09-e6737b2ffb6f
+      hippostdpubwf:lastModificationDate: 2020-09-14T10:41:12.745+02:00
+      hippostdpubwf:lastModifiedBy: admin
+      hippotaxonomy:keys: [social-security-directorate]
+      hippotranslation:id: 7b1bfa2f-b3b8-4f61-be09-e6737b2ffb6f
       hippotranslation:locale: document-type-locale
       publishing:authorNotes: ''
       publishing:lifeEvents: brexit
@@ -87,18 +91,20 @@
         jcr:primaryType: publishing:relateditems
     /index[3]:
       jcr:primaryType: publishing:category
-      jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'mix:referenceable']
+      jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'hippotaxonomy:classifiable',
+        'mix:referenceable']
       jcr:uuid: 46eec87d-23dc-4612-aee3-bc37bcb97239
       hippo:availability: [live]
       hippo:name: Brexit
       hippostd:state: published
       hippostd:tags: []
       hippostdpubwf:createdBy: system
       hippostdpubwf:creationDate: 2020-08-17T16:42:24.019+01:00
-      hippostdpubwf:lastModificationDate: 2020-08-17T16:42:24.237+01:00
-      hippostdpubwf:lastModifiedBy: system
-      hippostdpubwf:publicationDate: 2020-08-17T16:42:24.302+01:00
-      hippotranslation:id: 7b1bfa2f-b3b8-5b82-be09-e6737b2ffb6f
+      hippostdpubwf:lastModificationDate: 2020-09-10T18:34:17.540+03:00
+      hippostdpubwf:lastModifiedBy: social-security-editor
+      hippostdpubwf:publicationDate: 2020-09-10T18:34:20.270+03:00
+      hippotaxonomy:keys: [social-security-directorate]
+      hippotranslation:id: 7b1bfa2f-b3b8-4f61-be09-e6737b2ffb6f
       hippotranslation:locale: document-type-locale
       publishing:authorNotes: ''
       publishing:lifeEvents: brexit

repository-data/application/src/main/resources/hcm-content/content/documents/mygov/transport-travel.yaml

@@ -14,7 +14,8 @@
     hippo:versionHistory: 24fbc363-be32-4aa9-b4a6-babddf7d348b
     /index[1]:
       jcr:primaryType: publishing:category
-      jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'mix:versionable']
+      jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'hippotaxonomy:classifiable',
+        'mix:versionable']
       jcr:uuid: 683f699f-e5ad-4ef5-bfcf-584fb2a44198
       hippo:availability: [preview]
       hippo:name: Driving, transport and travel
@@ -92,7 +93,8 @@
         jcr:primaryType: publishing:relateditems
     /index[2]:
       jcr:primaryType: publishing:category
-      jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'mix:referenceable']
+      jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'hippotaxonomy:classifiable',
+        'mix:referenceable']
       jcr:uuid: 1b1822af-24b5-41bf-bfc1-14a38b32cc62
       hippo:availability: []
       hippo:name: Driving, transport and travel
@@ -170,7 +172,8 @@
         jcr:primaryType: publishing:relateditems
     /index[3]:
       jcr:primaryType: publishing:category
-      jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'mix:referenceable']
+      jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'hippotaxonomy:classifiable',
+        'mix:referenceable']
       jcr:uuid: 0858f0da-04e4-431d-836c-33845c5c24b1
       hippo:availability: [live]
       hippo:name: Driving, transport and travel
@@ -583,7 +586,8 @@
       hippo:versionHistory: 20d7ef82-3c3b-40aa-8907-64ada247d0c9
       /index[1]:
         jcr:primaryType: publishing:category
-        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'mix:versionable']
+        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'hippotaxonomy:classifiable',
+          'mix:versionable']
         jcr:uuid: 73379050-4855-4d22-b19c-e386c77ae760
         hippo:availability: [preview]
         hippo:name: Parking and Blue Badges
@@ -622,7 +626,8 @@
           jcr:primaryType: publishing:relateditems
       /index[2]:
         jcr:primaryType: publishing:category
-        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'mix:referenceable']
+        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'hippotaxonomy:classifiable',
+          'mix:referenceable']
         jcr:uuid: ecefb5e0-8dd6-4a6c-a346-9a29c79f7fad
         hippo:availability: []
         hippo:name: Parking and Blue Badges
@@ -661,7 +666,8 @@
           jcr:primaryType: publishing:relateditems
       /index[3]:
         jcr:primaryType: publishing:category
-        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'mix:referenceable']
+        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'hippotaxonomy:classifiable',
+          'mix:referenceable']
         jcr:uuid: bcd25ba3-9df6-40ce-b655-ff4f1ed9559d
         hippo:availability: [live]
         hippo:name: Parking and Blue Badges
@@ -8269,7 +8275,8 @@
       hippo:versionHistory: 355dba45-e7cf-4dc0-a9a6-6671250d6d7b
       /index[1]:
         jcr:primaryType: publishing:category
-        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'mix:versionable']
+        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'hippotaxonomy:classifiable',
+          'mix:versionable']
         jcr:uuid: 23aa8be5-d65e-47e6-bf0e-edfc3e7d18ac
         hippo:availability: [preview]
         hippo:name: Public transport, bus passes and discounts
@@ -8306,7 +8313,8 @@
           jcr:primaryType: publishing:relateditems
       /index[2]:
         jcr:primaryType: publishing:category
-        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'mix:referenceable']
+        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'hippotaxonomy:classifiable',
+          'mix:referenceable']
         jcr:uuid: ae75611e-68af-49d1-b80a-9bb4ca2a029d
         hippo:availability: []
         hippo:name: Public transport, bus passes and discounts
@@ -8343,7 +8351,8 @@
           jcr:primaryType: publishing:relateditems
       /index[3]:
         jcr:primaryType: publishing:category
-        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'mix:referenceable']
+        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'hippotaxonomy:classifiable',
+          'mix:referenceable']
         jcr:uuid: f8372cf5-7ee8-466b-8b06-a1b0446cdd5e
         hippo:availability: [live]
         hippo:name: Public transport, bus passes and discounts
@@ -22080,7 +22089,8 @@
       hippo:versionHistory: 23754463-a659-45fc-bdc5-f1e8606fd469
       /index[1]:
         jcr:primaryType: publishing:category
-        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'mix:versionable']
+        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'hippotaxonomy:classifiable',
+          'mix:versionable']
         jcr:uuid: 77e2c92e-1d82-4a54-811e-37e5bf35bf42
         hippo:availability: [preview]
         hippo:name: 'Road safety: parking tickets, fines and bans'
@@ -22118,7 +22128,8 @@
           jcr:primaryType: publishing:relateditems
       /index[2]:
         jcr:primaryType: publishing:category
-        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'mix:referenceable']
+        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'hippotaxonomy:classifiable',
+          'mix:referenceable']
         jcr:uuid: ff6cd694-e74f-4689-8c27-0c80f5e9fa9e
         hippo:availability: []
         hippo:name: 'Road safety: parking tickets, fines and bans'
@@ -22156,7 +22167,8 @@
           jcr:primaryType: publishing:relateditems
       /index[3]:
         jcr:primaryType: publishing:category
-        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'mix:referenceable']
+        jcr:mixinTypes: ['hippo:named', 'hippostd:taggable', 'hippotaxonomy:classifiable',
+          'mix:referenceable']
         jcr:uuid: a9497a14-3e45-46d2-8a1e-2251019f7381
         hippo:availability: [live]
         hippo:name: 'Road safety: parking tickets, fines and bans'