Document mapinfo permissions

Author: manisandro

src/configuration/ResourcesPermissions.md

@@ -38,6 +38,7 @@ The following resource types are available:
 | `Viewer asset`         | Viewer asset path, see [Viewer asset permissions](#viewer-asset-permissions).               |
 | `Document template`    | Document template name, see [Report permissions](../topics/Reports.md#Permissions).         |
 | `Theme info link`      | Theme info link name, see [theme info links](ThemesConfiguration.md#theme-info-links).      |
+| `Map info query`       | Map info query identifier, see [Map info permissions](../topics/Mapinfo.md#permissions).    |
 | `Plugin`               | Plugin name of [Plugin data](ThemesConfiguration.md#plugin-data) entries.                   |
 | `╰─ Plugin data`       | Plugin resource name [Plugin data](ThemesConfiguration.md#plugin-data) entries.             |
 

src/topics/Mapinfo.md

@@ -18,17 +18,20 @@ If the `qwc-mapinfo-service` is enabled, queries can be configured in the servic
         "info_geom_col": "wkb_geometry",
         "info_display_col": "name",
         "info_where": "type = 'Sovereign country'",
-        "info_title": "Country"
+        "info_title": "Country",
+        "info_id": "country"
       },
       {
         "db_url": "postgresql:///?service=qwc_geodb",
         "info_sql": "SELECT type FROM qwc_geodb.ne_10m_admin_0_countries WHERE ST_contains(wkb_geometry, ST_SetSRID(ST_Point(:x, :y), :srid)) LIMIT 1",
-        "info_title": "Type"
+        "info_title": "Type",
+        "info_id": "type"
       },
       {
         "db_url": "postgresql:///?service=qwc_geodb",
         "info_sql": "SELECT abbrev, postal, subregion FROM qwc_geodb.ne_10m_admin_0_countries WHERE ST_contains(wkb_geometry, ST_SetSRID(ST_Point(:x, :y), :srid)) LIMIT 1",
-        "info_title": ["Abbreviation", "Postal Code", "Subregion"]
+        "info_title": ["Abbreviation", "Postal Code", "Subregion"],
+        "info_id": "details"
       }
     ]
   }
@@ -44,3 +47,8 @@ If the `qwc-mapinfo-service` is enabled, queries can be configured in the servic
 will be returned and displayed in the map-info popup as with title as specified in `info_title`.
 
 * If `info_sql` is provided, the result obtained from the specified query will be returned. Use the `:x`, `:y` and `:srid` placeholders.
+* The `info_id` is required if you want to assign permissions to the mapinfo queries, see below.
+
+## Permissions <a name="permissions"></a>
+
+You can assign permissions to the mapinfo queries by creating and permitting `Map info query` resources, which shall be named according to the `info_id` of the query. If `permissions_default_allow` is `true` in `tenatConfig.json`, all mapinfo queries are permitted by default unless a permission is assigned to a specific role.