<?php
/* ACL rules, not yet in db.
*
* tell which filters can be used to define object access rights on a realm.
a => client must be logged as $ruid
b => client must be member of group $rgid
c => client must be admin of group $rgid
d => match everybody
e => client's request must come from the specified MAC addr
f => client's request must come from the specified IP addr
g => client's request must come from the specified netmask
h => client's request must come from the specified hostname
*/
//pages
$o['pages'][1]['list'][] = Array('b', 'ovpn:1'); //hellarpcs
$o['pages'][1]['read'][] = Array('b', 'ovpn:1');
$o['pages'][2]['list'][] = Array('b', 'ovpn:1'); //search
$o['pages'][2]['read'][] = Array('b', 'ovpn:1');
$o['pages'][3]['list'][] = Array('b', 'ovpn:1'); //advsearch
$o['pages'][3]['read'][] = Array('b', 'ovpn:1');
$o['pages'][4]['list'][] = Array('b', 'ovpn:1'); //profile
$o['pages'][4]['read'][] = Array('b', 'ovpn:1');
$o['pages'][5]['list'][] = Array('d', ''); //login
$o['pages'][5]['read'][] = Array('d', '');
$o['pages'][6]['list'] = $o['pages'][1]['list']; //browse
$o['pages'][6]['read'] = $o['pages'][1]['read'];
$o['pages'][7]['list'][] = Array('d', ''); //update
$o['pages'][7]['read'][] = Array('d', '');
//leftmenu
$o['leftmenu']['realm']['read'][] = Array('d', '');
$o['leftmenu']['credit']['read'][] = Array('d', '');
$o['leftmenu']['didrate']['read'] = $o['pages'][1]['read'];
$o['leftmenu']['did']['read'] = $o['pages'][1]['read'];
$o['leftmenu']['nzbupload']['read'] = $o['pages'][1]['read'];
$o['leftmenu']['quicksearch']['read'] = $o['pages'][2]['read'];
$o['leftmenu']['searchtree']['read'] = $o['pages'][2]['read'];
$o['tfeat']['debug']['fetch'][] = Array('b', 'ovpn:1');
$o['tfeat']['debug']['backtrace'][] = Array('b', 'ovpn:1');
//RPCs
$o['rpc'][0]['list'][] = Array('b', 'ovpn:1');
$o['rpc'][0]['read'][] = Array('b', 'ovpn:1');
$o['rpc'][0]['use'][] = Array('b', 'ovpn:1');
$o['rpc'][0]['manage'][] = Array('b', 'ovpn:0');
$o['rpc'][1]['list'][] = Array('b', 'ovpn:1');
$o['rpc'][1]['read'][] = Array('b', 'ovpn:1');
$o['rpc'][1]['use'][] = Array('b', 'ovpn:1');
$o['rpc'][1]['manage'][] = Array('b', 'ovpn:1');
$o['rpc'][2]['list'][] = Array('b', 'ovpn:1');
$o['rpc'][2]['read'][] = Array('b', 'ovpn:0');
$o['rpc'][2]['use'][] = Array('b', 'ovpn:0');
$o['rpc'][2]['manage'][] = Array('b', 'ovpn:0');
return $o;