A profile would not be very useful if it could not grant rights appropriately for groups. Profiles allow to create groups and to modify the permissions of existing groups using a unified syntax.
The permissions block is a top level block.
Permission block structure sample
preferences:
...
permissions:
Anonymous:
allow: [ export_wiki ]
Registered:
description: Will be ignored because group is already created
allow: [ edit, minor ]
deny: [ export_wiki ]
Moderators:
description: Trusted users watching the recent changes to avoid spam
allow: [ rollback ]
include: [ Registered ]
objects:
-
type: forum
id: $moderator_discussion_forum
allow: [ forun_post, forum_post_topic, forum_read ]
objects:
...
As you can see, the
tiki_p_ prefix was removed from the permission names to reduce the length and increase readability.
Permissions can be set to specific objects as long as the ID is known or it was also created by a profile using ObjectReferences. The object type does not have to be supported by TikiProfiles, but a static ID will have to be provided.
The include property can be a single value or an array.