no global read since that gives configuration as well

spiffworkflow-backend/src/spiffworkflow_backend/config/permissions/development.yml

@@ -72,24 +72,19 @@ groups:
     users: [core]
 
 permissions:
+  admin:
+    groups: [admin]
+    users: []
+    allowed_permissions: [create, read, update, delete]
+    uri: /*
+
   tasks-crud:
     groups: [everybody]
     users: []
     allowed_permissions: [create, read, update, delete]
     uri: /v1.0/tasks/*
 
-  admin:
-    groups: [admin]
-    users: []
-    allowed_permissions: [create, read, update, delete, list, instantiate]
-    uri: /*
-
-  read-all:
-    groups: ["Finance Team", "Project Lead", admin]
-    users: []
-    allowed_permissions: [read]
-    uri: /*
-
+  # read all for everybody
   read-all-process-groups:
     groups: [everybody]
     users: []
@@ -100,17 +95,18 @@ permissions:
     users: []
     allowed_permissions: [read]
     uri: /v1.0/process-models/*
-  read-process-instance-list:
+  read-all-process-instance:
     groups: [everybody]
     users: []
     allowed_permissions: [read]
-    uri: /v1.0/process-instances
+    uri: /v1.0/process-instances/*
   read-process-instance-reports:
     groups: [everybody]
     users: []
     allowed_permissions: [read]
     uri: /v1.0/process-instances/reports/*
 
+
   manage-procurement-admin:
     groups: ["Project Lead"]
     users: []

spiffworkflow-backend/src/spiffworkflow_backend/config/permissions/terraform_deployed_environment.yml

@@ -72,24 +72,19 @@ groups:
     users: [core]
 
 permissions:
+  admin:
+    groups: [admin]
+    users: []
+    allowed_permissions: [create, read, update, delete]
+    uri: /*
+
   tasks-crud:
     groups: [everybody]
     users: []
     allowed_permissions: [create, read, update, delete]
     uri: /v1.0/tasks/*
 
-  admin:
-    groups: [admin]
-    users: []
-    allowed_permissions: [create, read, update, delete, list, instantiate]
-    uri: /*
-
-  read-all:
-    groups: ["Finance Team", "Project Lead", admin]
-    users: []
-    allowed_permissions: [read]
-    uri: /*
-
+  # read all for everybody
   read-all-process-groups:
     groups: [everybody]
     users: []
@@ -100,17 +95,18 @@ permissions:
     users: []
     allowed_permissions: [read]
     uri: /v1.0/process-models/*
-  read-process-instance-list:
+  read-all-process-instance:
     groups: [everybody]
     users: []
     allowed_permissions: [read]
-    uri: /v1.0/process-instances
+    uri: /v1.0/process-instances/*
   read-process-instance-reports:
     groups: [everybody]
     users: []
     allowed_permissions: [read]
     uri: /v1.0/process-instances/reports/*
 
+
   manage-procurement-admin:
     groups: ["Project Lead"]
     users: []