jeffemmett
/
rfiles-online
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

docs: add MODULE_SPEC.md with permission model and capabilities 

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Jeff Emmett 2026-02-17 12:30:14 -07:00
parent 67fbdf0cb0
commit 651bbe5d87
1 changed files with 38 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
MODULE_SPEC.md Normal file
View File

@ -0,0 +1,38 @@
# rFiles — File Sharing
**Module ID:** `rfiles`
**Domain:** `rfiles.online`
**Version:** 0.1.0
**Framework:** Django 5.2 / DRF / PostgreSQL / Celery / Redis
**Status:** Active
## Purpose
Secure file sharing with space-based access control and asynchronous processing. Uses Django REST Framework with EncryptID JWT authentication. Celery workers handle background tasks (file processing, indexing).
## Data Model
Django models (PostgreSQL). SharedSpaces, files, users. Includes `visibility` and `owner_did` fields on SharedSpace.
## Permission Model
| Capability | Required SpaceRole | Description |
|-----------|-------------------|-------------|
| `view_files` | VIEWER | Browse and download files |
| `upload_file` | PARTICIPANT | Upload new files |
| `manage_own_files` | PARTICIPANT | Rename/delete own files |
| `manage_any_files` | MODERATOR | Edit/delete any file |
| `configure_storage` | ADMIN | Space settings, storage quotas |
**Current Auth:** EncryptID JWT via Django middleware + DRF `SpacePermission` class. Space visibility already implemented.
## Canvas Integration
Future: `folk-file` shape for file preview cards on canvas.
## Migration Plan
1. Already has EncryptID auth + space visibility
2. Import Python `SpaceRole` from `encryptid-sdk/src/python/roles.py`
3. Add `has_capability()` checks in DRF permission classes
4. Add membership table for explicit role assignments