enforce_access_restrictions = 1

access_restrictions = {

	# -----------------------------------------------
	# "administrate" module
	# -----------------------------------------------

	administrate/access = {
		default = {
			actions = { can_set_access_control }
		}
	},
	administrate/setup/ConfigurationCheckController = {
		default = {
			actions = { can_view_configuration_check }
		}
	},
	administrate/setup/ElementsController = {
		default = {
			actions = { can_configure_metadata_elements }
		}
	},
	administrate/setup/InterfacesController = {
		default = {
			actions = { can_configure_user_interfaces }
		}
	},
	administrate/setup/list_editor/ListEditorController = {
		default = {
			operator = OR,
			actions = { can_edit_ca_lists, can_create_ca_lists, can_delete_ca_lists }
		}
	},
	administrate/setup/list_editor/ListEditorController/Save = {
		create = {
			parameters = {
				list_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_lists }
		},
		edit = {
			parameters = {
				list_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_ca_lists }
		}
	},
	administrate/setup/list_editor/ListEditorController/Edit = {
		edit_delete = {
			parameters = {
				list_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_lists, can_delete_ca_lists }
		},
		create = {
			parameters = {
				list_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_lists }
		},
	},
	administrate/setup/list_editor/ListEditorController/Delete = {
		default = {
			actions = { can_delete_ca_lists }
		}
	},
	administrate/setup/list_item_editor/ListItemEditorController = {
		default = {
			operator = OR,
			actions = { can_edit_ca_lists, can_create_ca_lists, can_delete_ca_lists }
		}
	},
	administrate/setup/list_item_editor/ListItemEditorController/Save = {
		create = {
			parameters = {
				item_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_lists }
		},
		edit = {
			parameters = {
				item_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_ca_lists }
		}
	},
	administrate/setup/list_item_editor/ListItemEditorController/Edit = {
		edit_delete = {
			parameters = {
				item_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_lists, can_delete_ca_lists }
		},
		create = {
			parameters = {
				item_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_lists }
		},
	},
	administrate/setup/list_item_editor/ListItemEditorController/Delete = {
		default = {
			actions = { can_delete_ca_lists }
		}
	},
	administrate/setup/ListsController = {
		default = {
			operator = OR,
			actions = { can_edit_ca_lists, can_create_ca_lists, can_delete_ca_lists }
		}
	},
	administrate/setup/LocalesController = {
		default = {
			actions = { can_configure_locales }
		}
	},
	administrate/setup/relationship_type_editor/RelationshipTypeEditorController = {
		default = {
			actions = { can_configure_relationship_types }
		}
	},
	administrate/setup/RelationshipTypesController = {
		default = {
			actions = { can_configure_relationship_types }
		}
	},

	# -----------------------------------------------
	# "editor" module
	# -----------------------------------------------

	editor/collections/CollectionEditorController = {
		default = {
			operator = OR,
			actions = { can_create_ca_collections, can_edit_ca_collections, can_delete_ca_collections, can_search_ca_collections, can_browse_ca_collections }
		}
	},
	editor/collections/CollectionEditorController/Edit = {
		edit_delete = {
			parameters = {
				collection_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_collections, can_delete_ca_collections }
		},
		create = {
			parameters = {
				collection_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_collections }
		},
	},
	editor/collections/CollectionEditorController/Summary = {
		default = {
			operator = OR,
			actions = { can_edit_ca_collections, can_search_ca_collections, can_browse_ca_collections }
		}
	},
	editor/collections/CollectionEditorController/Save = {
		create = {
			parameters = {
				collection_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_collections }
		},
		edit = {
			parameters = {
				collection_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_ca_collections }
		}
	},
	editor/collections/CollectionEditorController/Delete = {
		default = {
			actions = { can_delete_ca_collections }
		}
	},
	editor/entities/EntityEditorController = {
		default = {
			operator = OR,
			actions = { can_create_ca_entities, can_edit_ca_entities, can_delete_ca_entities, can_search_ca_entities, can_browse_ca_entities }
		}
	},
	editor/entities/EntityEditorController/Edit = {
		edit_delete = {
			parameters = {
				entity_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_entities, can_delete_ca_entities }
		},
		create = {
			parameters = {
				entity_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_entities }
		},
	},
	editor/entities/EntityEditorController/Summary = {
		default = {
			operator = OR,
			actions = { can_edit_ca_entities, can_search_ca_entities, can_browse_ca_entities }
		}
	},
	editor/entities/EntityEditorController/Save = {
		create = {
			parameters = {
				entity_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_entities }
		},
		edit = {
			parameters = {
				entity_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_ca_entities }
		}
	},
	editor/entities/EntityEditorController/Delete = {
		default = {
			actions = { can_delete_ca_entities }
		}
	},
	editor/object_events/ObjectEventEditorController = { # this controller is not hooked up in navigation.conf at the moment (Aug 10)
		default = {
			operator = OR,
			actions = { can_create_ca_objects, can_edit_ca_objects, can_delete_ca_objects }
		}
	},
	editor/object_lots/ObjectLotEditorController = {
		default = {
			operator = OR,
			actions = { can_create_ca_object_lots, can_edit_ca_object_lots, can_delete_ca_object_lots, can_search_ca_object_lots, can_browse_ca_object_lots }
		}
	},
	editor/object_lots/ObjectLotEditorController/Edit = {
		edit_delete = {
			parameters = {
				lot_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_object_lots, can_delete_ca_object_lots }
		},
		create = {
			parameters = {
				lot_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_object_lots }
		},
	},
	editor/object_lots/ObjectLotEditorController/Summary = {
		default = {
			operator = OR,
			actions = { can_edit_ca_object_lots, can_search_ca_object_lots, can_browse_ca_object_lots }
		}
	},
	editor/object_lots/ObjectLotEditorController/Save = {
		create = {
			parameters = {
				lot_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_object_lots }
		},
		edit = {
			parameters = {
				lot_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_ca_object_lots }
		}
	},
	editor/object_lots/ObjectLotEditorController/Delete = {
		default = {
			actions = { can_delete_ca_object_lots }
		}
	},
	editor/object_representations/ObjectRepresentationEditorController = {
		default = {
			operator = OR,
			actions = { can_create_ca_objects, can_edit_ca_objects, can_delete_ca_objects, can_search_ca_objects, can_browse_ca_objects }
		}
	},
	editor/object_representations/ObjectRepresentationEditorController/Edit = {
		edit_delete = {
			parameters = {
				representation_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_objects, can_delete_ca_objects }
		},
		create = {
			parameters = {
				representation_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_objects }
		},
	},
	editor/object_representations/ObjectRepresentationEditorController/Summary = {
		default = {
			operator = OR,
			actions = { can_edit_ca_objects, can_search_ca_objects, can_browse_ca_objects }
		}
	},
	editor/object_representations/ObjectRepresentationEditorController/Save = {
		create = {
			parameters = {
				representation_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_objects }
		},
		edit = {
			parameters = {
				representation_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_ca_objects }
		}
	},
	editor/object_representations/ObjectRepresentationEditorController/Delete = {
		default = {
			actions = { can_delete_ca_objects }
		}
	},
	editor/objects/ObjectEditorController = {
		default = {
			operator = OR,
			actions = { can_create_ca_objects, can_edit_ca_objects, can_delete_ca_objects, can_search_ca_objects, can_browse_ca_objects }
		}
	},
	editor/objects/ObjectEditorController/Edit = {
		edit_delete = {
			parameters = {
				object_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_objects, can_delete_ca_objects }
		},
		create = {
			parameters = {
				object_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_objects }
		},
	},
	editor/objects/ObjectEditorController/Summary = {
		default = {
			operator = OR,
			actions = { can_edit_ca_objects, can_search_ca_objects, can_browse_ca_objects }
		}
	},
	editor/objects/ObjectEditorController/Save = {
		create = {
			parameters = {
				object_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_objects }
		},
		edit = {
			parameters = {
				object_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_ca_objects }
		}
	},
	editor/objects/ObjectEditorController/Delete = {
		default = {
			actions = { can_delete_ca_objects }
		}
	},
	editor/occurrences/OccurrenceEditorController = {
		default = {
			operator = OR,
			actions = { can_create_ca_occurrences, can_edit_ca_occurrences, can_delete_ca_occurrences, can_search_ca_occurrences, can_browse_ca_occurrences }
		}
	},
	editor/occurrences/OccurrenceEditorController/Edit = {
		edit_delete = {
			parameters = {
				occurrence_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_occurrences, can_delete_ca_occurrences }
		},
		create = {
			parameters = {
				occurrence_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_occurrences }
		},
	},
	editor/occurrences/OccurrenceEditorController/Summary = {
		default = {
			operator = OR,
			actions = { can_edit_ca_occurrences, can_search_ca_occurrences, can_browse_ca_occurrences }
		}
	},
	editor/occurrences/OccurrenceEditorController/Save = {
		create = {
			parameters = {
				occurrence_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_occurrences }
		},
		edit = {
			parameters = {
				occurrence_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_ca_occurrences }
		}
	},
	editor/occurrences/OccurrenceEditorController/Delete = {
		default = {
			actions = { can_delete_ca_occurrences }
		}
	},
	editor/places/PlaceEditorController = {
		default = {
			operator = OR,
			actions = { can_create_ca_places, can_edit_ca_places, can_delete_ca_places, can_search_ca_places, can_browse_ca_places }
		}
	},
	editor/places/PlaceEditorController/Edit = {
		edit_delete = {
			parameters = {
				place_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_places, can_delete_ca_places }
		},
		create = {
			parameters = {
				place_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_places }
		},
	},
	editor/places/PlaceEditorController/Summary = {
		default = {
			operator = OR,
			actions = { can_edit_ca_places, can_search_ca_places, can_browse_ca_places }
		}
	},
	editor/places/PlaceEditorController/Save = {
		create = {
			parameters = {
				place_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_places }
		},
		edit = {
			parameters = {
				place_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_ca_places }
		}
	},
	editor/places/PlaceEditorController/Delete = {
		default = {
			actions = { can_delete_ca_places }
		}
	},
	editor/representation_annotations/RepresentationAnnotationEditorController = {
		default = {
			operator = OR,
			actions = { can_create_ca_objects, can_edit_ca_objects, can_delete_ca_objects, can_search_ca_objects, can_browse_ca_objects }
		}
	},
	editor/representation_annotations/RepresentationAnnotationEditorController/Edit = {
		edit_delete = {
			parameters = {
				item_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_objects, can_delete_ca_objects }
		},
		create = {
			parameters = {
				item_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_objects }
		},
	},
	editor/representation_annotations/RepresentationAnnotationEditorController/Summary = {
		default = {
			operator = OR,
			actions = { can_edit_ca_objects, can_search_ca_objects, can_browse_ca_objects }
		}
	},
	editor/representation_annotations/RepresentationAnnotationEditorController/Save = {
		create = {
			parameters = {
				annotation_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_objects }
		},
		edit = {
			parameters = {
				annotation_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_ca_objects }
		}
	},
	editor/representation_annotations/RepresentationAnnotationEditorController/Delete = {
		default = {
			actions = { can_delete_ca_objects }
		}
	},
	editor/storage_locations/StorageLocationEditorController = {
		default = {
			operator = OR,
			actions = { can_create_ca_storage_locations, can_edit_ca_storage_locations, can_delete_ca_storage_locations, can_search_ca_storage_locations, can_browse_ca_storage_locations }
		}
	},
	editor/storage_locations/StorageLocationEditorController/Edit = {
		edit_delete = {
			parameters = {
				location_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_storage_locations, can_delete_ca_storage_locations }
		},
		create = {
			parameters = {
				location_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_storage_locations }
		},
	},
	editor/storage_locations/StorageLocationEditorController/Summary = {
		default = {
			operator = OR,
			actions = { can_edit_ca_storage_locations, can_search_ca_storage_locations, can_browse_ca_storage_locations }
		}
	},
	editor/storage_locations/StorageLocationEditorController/Save = {
		create = {
			parameters = {
				location_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_storage_locations }
		},
		edit = {
			parameters = {
				location_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_ca_storage_locations }
		}
	},
	editor/storage_locations/StorageLocationEditorController/Delete = {
		default = {
			actions = { can_delete_ca_storage_locations }
		}
	},
	
	editor/loans/LoanEditorController = {
		default = {
			operator = OR,
			actions = { can_create_ca_loans, can_edit_ca_loans, can_delete_ca_loans, can_search_ca_loans, can_browse_ca_loans }
		}
	},
	editor/loans/LoanEditorController/Edit = {
		edit_delete = {
			parameters = {
				loan_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_loans, can_delete_ca_loans }
		},
		create = {
			parameters = {
				loan_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_loans }
		},
	},
	editor/loans/LoanEditorController/Summary = {
		default = {
			operator = OR,
			actions = { can_edit_ca_loans, can_search_ca_loans, can_browse_ca_loans }
		}
	},
	editor/loans/LoanEditorController/Save = {
		create = {
			parameters = {
				loan_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_loans }
		},
		edit = {
			parameters = {
				loan_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_ca_loans }
		}
	},
	editor/loans/LoanEditorController/Delete = {
		default = {
			actions = { can_delete_ca_loans }
		}
	},
	
	editor/movements/MovementEditorController = {
		default = {
			operator = OR,
			actions = { can_create_ca_movements, can_edit_ca_movements, can_delete_ca_movements, can_search_ca_movements, can_browse_ca_movements }
		}
	},
	editor/movements/MovementEditorController/Edit = {
		edit_delete = {
			parameters = {
				movement_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_movements, can_delete_ca_movements }
		},
		create = {
			parameters = {
				movement_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_movements }
		},
	},
	editor/movements/MovementEditorController/Summary = {
		default = {
			operator = OR,
			actions = { can_edit_ca_movements, can_search_ca_movements, can_browse_ca_movements }
		}
	},
	editor/movements/MovementEditorController/Save = {
		create = {
			parameters = {
				movement_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_movements }
		},
		edit = {
			parameters = {
				movement_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_ca_movements }
		}
	},
	editor/movements/MovementEditorController/Delete = {
		default = {
			actions = { can_delete_ca_movements }
		}
	},
	
	editor/tours/TourEditorController = {
		default = {
			operator = OR,
			actions = { can_create_ca_tours, can_edit_ca_tours, can_delete_ca_tours, can_search_ca_tours, can_browse_ca_tours }
		}
	},
	editor/tours/TourEditorController/Edit = {
		edit_delete = {
			parameters = {
				tour_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_tours, can_delete_ca_tours }
		},
		create = {
			parameters = {
				tour_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_tours }
		},
	},
	editor/tours/TourEditorController/Summary = {
		default = {
			operator = OR,
			actions = { can_edit_ca_tours, can_search_ca_tours, can_browse_ca_tours }
		}
	},
	editor/tours/TourEditorController/Save = {
		create = {
			parameters = {
				tour_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_tours }
		},
		edit = {
			parameters = {
				tour_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_ca_tours }
		}
	},
	editor/tours/TourEditorController/Delete = {
		default = {
			actions = { can_delete_ca_tours }
		}
	},
	
	editor/tour_stops/TourStopEditorController = {
		default = {
			operator = OR,
			actions = { can_create_ca_tours, can_edit_ca_tours, can_delete_ca_tours, can_search_ca_tours, can_browse_ca_tours }
		}
	},
	editor/tour_stops/TourStopEditorController/Edit = {
		edit_delete = {
			parameters = {
				stop_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_tours, can_delete_ca_tours }
		},
		create = {
			parameters = {
				stop_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_tours }
		},
	},
	editor/tour_stops/TourStopEditorController/Summary = {
		default = {
			operator = OR,
			actions = { can_edit_ca_tours, can_search_ca_tours, can_browse_ca_tours }
		}
	},
	editor/tour_stops/TourStopEditorController/Save = {
		create = {
			parameters = {
				stop_id = {
					value = not_set
				}
			},
			actions = { can_create_ca_tours }
		},
		edit = {
			parameters = {
				stop_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_ca_tours }
		}
	},
	editor/tour_stops/TourStopEditorController/Delete = {
		default = {
			actions = { can_delete_ca_tours }
		}
	},

	# -----------------------------------------------
	# "find" module
	# -----------------------------------------------

	find = {
		default = {
			operator = OR,
			actions = { 
				can_browse_ca_collections, can_browse_ca_collections, can_browse_ca_entities, can_browse_ca_object_lots, can_browse_ca_objects, can_browse_ca_occurrences, can_browse_ca_places, can_browse_ca_loans, can_browse_ca_movements,  
				can_search_ca_collections, can_search_ca_collections, can_search_ca_entities, can_search_ca_object_lots, can_search_ca_objects, can_search_ca_occurrences, can_search_ca_places, can_search_ca_loans, can_search_ca_movements,
				can_quicksearch 
			}
		}
	},
	find/BrowseCollectionsController = {
		default = {
			operator = OR,
			actions = { can_browse_ca_collections }
		}
	},
	find/BrowseEntitiesController = {
		default = {
			operator = OR,
			actions = { can_browse_ca_entities }
		}
	},
	find/BrowseObjectLotsController = {
		default = {
			operator = OR,
			actions = { can_browse_ca_object_lots }
		}
	},
	find/BrowseObjectsController = {
		default = {
			operator = OR,
			actions = { can_browse_ca_objects }
		}
	},
	find/BrowseOccurrencesController = {
		default = {
			operator = OR,
			actions = { can_browse_ca_occurrences }
		}
	},
	find/BrowsePlacesController = {
		default = {
			operator = OR,
			actions = { can_browse_ca_places }
		}
	},
	find/BrowseStorageLocationsController = {
		default = {
			operator = OR,
			actions = { can_browse_ca_storage_locations }
		}
	},

	find/BrowseLoansController = {
		default = {
			operator = OR,
			actions = { can_browse_ca_loans}
		}
	},
	
	find/BrowseMovements = {
		default = {
			operator = OR,
			actions = { can_browse_ca_movements }
		}
	},

	find/QuickSearchController = {
		default = {
			operator = OR,
			actions = { can_quicksearch }
		}
	},
	find/SearchCollectionsAdvancedController = {
		default = {
			operator = OR,
			actions = { can_search_ca_collections }
		}
	},
	find/SearchCollectionsController = {
		default = {
			operator = OR,
			actions = { can_search_ca_collections }
		}
	},
	find/SearchEntitiesAdvancedController = {
		default = {
			operator = OR,
			actions = { can_search_ca_entities }
		}
	},
	find/SearchEntitiesController = {
		default = {
			operator = OR,
			actions = { can_search_ca_entities }
		}
	},
	find/SearchObjectLotsAdvancedController = {
		default = {
			operator = OR,
			actions = { can_search_ca_object_lots }
		}
	},
	find/SearchObjectLotsController = {
		default = {
			operator = OR,
			actions = { can_search_ca_object_lots }
		}
	},
	find/SearchObjectsAdvancedController = {
		default = {
			operator = OR,
			actions = { can_search_ca_objects }
		}
	},
	find/SearchObjectsController = {
		default = {
			operator = OR,
			actions = { can_search_ca_objects }
		}
	},
	find/SearchOccurrencesAdvancedController = {
		default = {
			operator = OR,
			actions = { can_search_ca_occurrences }
		}
	},
	find/SearchOccurrencesController = {
		default = {
			operator = OR,
			actions = { can_search_ca_occurrences }
		}
	},
	find/SearchPlacesAdvancedController = {
		default = {
			operator = OR,
			actions = { can_search_ca_places }
		}
	},
	find/SearchPlacesController = {
		default = {
			operator = OR,
			actions = { can_search_ca_places }
		}
	},
	find/SearchStorageLocationsAdvancedController = {
		default = {
			operator = OR,
			actions = { can_search_ca_storage_locations }
		}
	},
	find/SearchStorageLocationsController = {
		default = {
			operator = OR,
			actions = { can_search_ca_storage_locations }
		}
	},
	
	find/SearchLoansAdvancedController = {
		default = {
			operator = OR,
			actions = { can_search_ca_loans }
		}
	},
	find/SearchLoansController = {
		default = {
			operator = OR,
			actions = { can_search_ca_loans }
		}
	},
	
	find/SearchMovementsAdvancedController = {
		default = {
			operator = OR,
			actions = { can_search_ca_movements}
		}
	},
	find/SearchMovementsController = {
		default = {
			operator = OR,
			actions = { can_search_ca_movements }
		}
	},

	# -----------------------------------------------
	# "logs" module
	# -----------------------------------------------

	logs = {
		actions = { can_view_logs }
	},

	# -----------------------------------------------
	# "lookup" module
	# -----------------------------------------------

	# -----------------------------------------------
	# "manage" module
	# -----------------------------------------------

	manage/bundle_displays/BundleDisplayEditorController = {
		default = {
			operator = OR,
			actions = { can_create_ca_bundle_displays, can_edit_ca_bundle_displays, can_delete_ca_bundle_displays, can_manage_system_bundle_displays }
		}
	},
	manage/bundle_displays/BundleDisplayEditorController/Edit = {
		edit_delete = {
			parameters = {
				display_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_bundle_displays, can_delete_ca_bundle_displays, can_manage_system_bundle_displays }
		},
		create = {
			parameters = {
				display_id = {
					value = not_set
				}
			},
			operator = OR,
			actions = { can_create_ca_bundle_displays, can_manage_system_bundle_displays }
		},
	},
	manage/bundle_displays/BundleDisplayEditorController/Save = {
		create = {
			parameters = {
				display_id = {
					value = not_set
				}
			},
			operator = OR,
			actions = { can_create_ca_bundle_displays, can_manage_system_bundle_displays }
		},
		edit = {
			parameters = {
				display_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_ca_bundle_displays, can_manage_system_bundle_displays }
		},
		system = {
			parameters = {
				is_system = {
					value = 1,
					type = int
				}
			},
			actions = { can_manage_system_bundle_displays }
		}
	},
	manage/bundle_displays/BundleDisplayEditorController/Delete = {
		default = {
			operator = OR,
			actions = { can_delete_ca_bundle_displays, can_manage_system_bundle_displays }
		}
	},
	manage/BundleDisplaysController = {
		default = {
			operator = OR,
			actions = { can_edit_ca_bundle_displays, can_create_ca_bundle_displays, can_delete_ca_bundle_displays, can_manage_system_bundle_displays }
		}
	},
	manage/CommentsController = {
		actions = { can_manage_user_comments }
	},
	manage/GroupsController = {
		actions = { can_create_user_groups }
	},
	manage/search_forms/SearchFormEditorController = {
		default = {
			operator = OR,
			actions = { can_create_adv_search_forms, can_edit_adv_search_forms, can_delete_adv_search_forms, can_manage_system_search_forms }
		}
	},
	manage/search_forms/SearchFormEditorController/Edit = {
		edit_delete = {
			parameters = {
				form_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_adv_search_forms, can_delete_adv_search_forms, can_manage_system_search_forms }
		},
		create = {
			parameters = {
				form_id = {
					value = not_set
				}
			},
			operator = OR,
			actions = { can_create_adv_search_forms, can_manage_system_search_forms }
		},
	},
	manage/search_forms/SearchFormEditorController/Save = {
		create = {
			parameters = {
				form_id = {
					value = not_set
				}
			},
			operator = OR,
			actions = { can_create_adv_search_forms, can_manage_system_search_forms }
		},
		edit = {
			parameters = {
				form_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_adv_search_forms, can_manage_system_search_forms }
		},
		system = {
			parameters = {
				is_system = {
					value = 1,
					type = int
				}
			},
			actions = { can_manage_system_search_forms }
		}
	},
	manage/search_forms/SearchFormEditorController/Delete = {
		default = {
			operator = OR,
			actions = { can_delete_adv_search_forms, can_manage_system_search_forms }
		}
	},
	manage/SearchFormController = {
		default = {
			operator = OR,
			actions = { can_edit_adv_search_forms, can_create_adv_search_forms, can_delete_adv_search_forms, can_manage_system_search_forms }
		}
	},
	manage/set_items/SetItemEditorController = {
		operator = OR,
		actions = { can_edit_sets, can_delete_sets, can_create_sets, can_view_sets }
	},
	manage/set_items/SetItemEditorController/Edit = {
		edit_delete = {
			parameters = {
				item_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_sets, can_delete_sets, can_view_sets }
		},
		create = {
			parameters = {
				item_id = {
					value = not_set
				}
			},
			operator = OR,
			actions = { can_create_sets, can_view_sets }
		},
	},
	manage/set_items/SetItemEditorController/Save = {
		create = {
			parameters = {
				item_id = {
					value = not_set
				}
			},
			actions = { can_create_sets }
		},
		edit = {
			parameters = {
				item_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_sets }
		}
	},
	manage/set_items/SetItemEditorController/Delete = {
		default = {
			actions = { can_delete_sets }
		}
	},
	manage/SetController = {
		actions = { can_view_sets }
	},
	manage/sets/SetEditorController = {
		operator = OR,
		actions = { can_edit_sets, can_delete_sets, can_create_sets, can_view_sets }
	},
	manage/sets/SetEditorController/Edit = {
		edit_delete = {
			parameters = {
				set_id = {
					value = !0,
					type = int
				}
			},
			operator = OR,
			actions = { can_edit_sets, can_delete_sets, can_view_sets }
		},
		create = {
			parameters = {
				set_id = {
					value = not_set
				}
			},
			operator = OR,
			actions = { can_create_sets, can_view_sets }
		},
	},
	manage/sets/SetEditorController/Save = {
		create = {
			parameters = {
				set_id = {
					value = not_set
				}
			},
			actions = { can_create_sets }
		},
		edit = {
			parameters = {
				set_id = {
					value = !0,
					type = int
				}
			},
			actions = { can_edit_sets }
		}
	},
	manage/sets/SetEditorController/Delete = {
		default = {
			actions = { can_delete_sets }
		}
	},
	manage/TagsController = {
		default = {
			actions = { can_manage_user_tags }
		}
	},

	# -----------------------------------------------
	# "system" module
	# -----------------------------------------------

	system/PreferencesController = {
		default = {
			actions = { can_set_preferences }
		}
	},

	# -----------------------------------------------
	# default module
	# -----------------------------------------------

	# -----------------------------------------------
	# service API
	# -----------------------------------------------

	browse/BrowseController/soap = {
		default = {
			actions = { can_use_browse_service }
		}
	},
	cataloguing/CataloguingController/soap = {
		default = {
			actions = { can_use_cataloguing_service }
		}
	},
	cataloguing/CataloguingController/rest = {
		default = {
			actions = { can_use_cataloguing_service }
		}
	},
	iteminfo/ItemInfoController/soap = {
		default = {
			actions = { can_use_iteminfo_service }
		}
	},
	iteminfo/ItemInfoController/rest = {
		default = {
			actions = { can_use_iteminfo_service }
		}
	},
	search/SearchController/soap = {
		default = {
			actions = { can_use_search_service }
		}
	},
	search/SearchController/rest = {
		default = {
			operator = OR,
			actions = { can_use_search_service, can_use_browse_service }
		}
	},
	usercontent/UserContentController/soap = {
		default = {
			actions = { can_use_usercontent_service }
		}
	},
	usercontent/UserContentController/rest = {
		default = {
			actions = { can_use_usercontent_service }
		}
	},

	# -----------------------------------------------
}