<?xml version="1.0" encoding="UTF-8"?>
<registry>
    <security-entry name="admin-only">
        <meta-info>
            <title>Admin-only</title>
            <description>Full access to user with the admin role.</description>
        </meta-info>
        <access action="*">
            <allow-if role="admin"/>
        </access>
    </security-entry>
    <security-entry name="user-only">
        <meta-info>
            <title>User-only</title>
            <description>Full access to users with the user role.</description>
        </meta-info>
        <access action="*">
            <allow-if role="user"/>
        </access>
    </security-entry>
    <security-entry name="owner-only">
        <meta-info>
            <title>Owner-only</title>
            <description>Full access to the owner.</description>
        </meta-info>
        <access action="*">
            <allow-if-owner/>
        </access>
    </security-entry>
    <security-entry name="default">
        <meta-info>
            <title>Default</title>
            <description>Full access to users with the user role and view access to users with the group role.</description>
        </meta-info>
        <access action="*">
            <allow-if role="user"/>
        </access>
        <access action="view">
            <allow-if role="guest"/>
        </access>
    </security-entry>
    <security-entry name="user-view_admin-all">
        <meta-info>
            <title>Users+V and Admin+C</title>
            <description>Users can view and Admin have full access.</description>
        </meta-info>
        <access action="*">
            <allow-if role="admin"/>
        </access>
        <access action="view">
            <allow-if role="user"/>
        </access>
    </security-entry>
</registry>
