mleku
5631c162d9
Introduced default security settings with stricter access control, including policies requiring owner/admin privileges by default. Added multiple pre-configured policy recipes, custom validator support, and extended documentation for security, configurations, and use cases.
180 lines
4.8 KiB
JSON
180 lines
4.8 KiB
JSON
{
|
|
"default_policy": "allow",
|
|
"owners": [],
|
|
"policy_admins": [],
|
|
"policy_follow_whitelist_enabled": false,
|
|
"kind": {
|
|
"whitelist": [0, 1, 3, 4, 5, 6, 7, 40, 41, 42, 43, 44, 9735],
|
|
"blacklist": []
|
|
},
|
|
"global": {
|
|
"description": "Global security rules applied to all events",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 100000,
|
|
"content_limit": 50000,
|
|
"max_age_of_event": 86400,
|
|
"max_age_event_in_future": 300,
|
|
"privileged": false
|
|
},
|
|
"rules": {
|
|
"0": {
|
|
"description": "Metadata events - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 16000,
|
|
"content_limit": 8000,
|
|
"max_age_of_event": 604800,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"1": {
|
|
"description": "Text notes - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 32000,
|
|
"content_limit": 10000,
|
|
"max_age_of_event": 3600,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"3": {
|
|
"description": "Contact lists - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 50000,
|
|
"content_limit": 20000,
|
|
"max_age_of_event": 2592000,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"4": {
|
|
"description": "Direct messages - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 16000,
|
|
"content_limit": 8000,
|
|
"max_age_of_event": 604800,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": true
|
|
},
|
|
"5": {
|
|
"description": "Event deletion - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 8000,
|
|
"content_limit": 4000,
|
|
"max_age_of_event": 86400,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"6": {
|
|
"description": "Reposts - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 8000,
|
|
"content_limit": 4000,
|
|
"max_age_of_event": 3600,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"7": {
|
|
"description": "Reaction events - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 8000,
|
|
"content_limit": 4000,
|
|
"max_age_of_event": 3600,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"40": {
|
|
"description": "Channel creation - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 16000,
|
|
"content_limit": 8000,
|
|
"max_age_of_event": 604800,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"41": {
|
|
"description": "Channel metadata - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 16000,
|
|
"content_limit": 8000,
|
|
"max_age_of_event": 604800,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"42": {
|
|
"description": "Channel messages - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 32000,
|
|
"content_limit": 10000,
|
|
"max_age_of_event": 3600,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"43": {
|
|
"description": "Channel hide message - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 8000,
|
|
"content_limit": 4000,
|
|
"max_age_of_event": 86400,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"44": {
|
|
"description": "Channel mute user - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 8000,
|
|
"content_limit": 4000,
|
|
"max_age_of_event": 604800,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
},
|
|
"9735": {
|
|
"description": "Zap receipts - allow all authenticated users",
|
|
"write_allow": [],
|
|
"write_deny": [],
|
|
"read_allow": [],
|
|
"read_deny": [],
|
|
"size_limit": 16000,
|
|
"content_limit": 8000,
|
|
"max_age_of_event": 3600,
|
|
"max_age_event_in_future": 60,
|
|
"privileged": false
|
|
}
|
|
}
|
|
} |