Roles and scopes

Authorization policies for the API endpoints are based on (OAuth) scopes. A scope is an equivalent to a permission. The following scopes are available:

Scope name	Permissions	Role GipodBijdrager	Role GipodRaadpleger	Role GipodApplicatieBeheerder	Role DeLijn
gipod_pdo_write	Manage public domain occupancies (groundworks, works, events, parking bans)
gipod_pdo_read	Read-only access to public domain occupancies (groundworks, works, events, parking bans)
gipod_ts_write	Manage trench synergy requests & synergies
gipod_ts_read	Read-only access trench synergy requests & synergies
gipod_org_write	Manage organisations within the structure of your organisation
gipod_org_read	Read-only access to organisations
gipod_org_settings	Manage organisations & application settings on organisation level
gipod_mh_write	Manage mobility hindrance
gipod_mh_read	Read-only access to mobility hindrance
gipod_notifications	Read notifications and update status of a notifications
gipod_impact_ov	Judge impact of public domain occupancies on public transport

A role is assigned to a user. A role specifies which scopes the user will get.

Role	Description	Allowed scopes
GipodBijdrager	Manage public domain occupancies Manage mobility hindrance Manage trench synergy requests Manage trench synergies Read organisations Read and manage notifications	gipod_pdo_write gipod_pdo_read gipod_ts_write gipod_ts_read gipod_mh_read gipod_mh_write gipod_org_read gipod_notifications
GipodRaadpleger	Read-only access to public domain occupancies Read-only access to mobility hindrance Read-only access to trench synergy requests Read-only access to trench synergies	gipod_pdo_read gipod_ts_read gipod_mh_read gipod_org_read
GipodApplicatieBeheerder	Manage organisation within the organisation structure Manage organisation level settings Manage trench synergy interest zone	gipod_org_read gipod_org_write gipod_org_settings
DeLijn (only for users from De Lijn)	Judge impact of public domain occupancies on public transport	gipod_impact_ov TOBE: gipod_pdo_read gipod_ts_read gipod_mh_read gipod_org_read