api.yml

default_access: &default_access
  list: [all]
  read: [all]
  update: [owner, admin]
  create: [all]
  destroy: [owner, admin]

root:
  activities:
    attributes:
      data: {}
      name:
      description:
    readonly_attributes:
      cid:
    access:
      <<: *default_access
      create: [admin]

  activity_sessions:
    attributes:
      percentage:
      time_spent:
      state:
      completed_at:
      data: {}
      temporary:
      activity_uid:
    readonly_attributes:
      anonymous:
    access:
      <<: *default_access