Set AuthZ

Set authorization entitlements as described in https://docs.psnc.pl/pages/viewpage.action?spaceKey=EOSCLOT123&title=Authorisation+Entitlements

common/deployments/hub-staging.yaml

@@ -169,7 +169,6 @@ hub:
         # valtri@civ.zcu.cz
         - 94d3cde7-3121-4b33-b4c2-526c67e8cb38@eosc-federation.eu
       allowed_groups:
-        - urn:geant:eosc-federation.eu:staging:group:eosc#staging.eosc-federation.eu
         - urn:geant:eosc-federation.eu:res:notebooks.open-science-cloud.ec.europa.eu:2-vcpu-4-gb-ram:act:ppa
         - urn:geant:eosc-federation.eu:res:notebooks.open-science-cloud.ec.europa.eu:4-vcpu-8-gb-ram:act:ppa
         - urn:geant:eosc-federation.eu:res:notebooks.open-science-cloud.ec.europa.eu:8-vcpu-16-gb-ram-gpu:act:ppa
@@ -208,7 +207,7 @@ hub:
       from egi_notebooks_hub.onedata import OnedataSpawner
       from tornado.httpclient import AsyncHTTPClient, HTTPClientError, HTTPRequest
 
-      class WebDavOIDCSpawner(OneDataSpawner):
+      class WebDavOIDCSpawner(OnedataSpawner):
           # ownCloud Infinite Scale parameters
           # (https://owncloud.dev/apis/http/graph/spaces/#list-my-spaces-get-medrives)
           OCIS_URL = "https://ocis-staging.apps.bst2-test.paas.psnc.pl"
@@ -313,4 +312,17 @@ hub:
       stringData: |-
 {%- raw %}
         {% extends "login.html" %}
+{% endraw %}
+    403.html:
+      mountPath: /usr/local/share/jupyterhub/templates/403.html
+      stringData: |-
+{%- raw %}
+        {% extends "error.html" %}
+        {% block main %}
+        <div class="error">
+          <h1>Unauthorized</h1>
+          <p>You don't have the correct entitlements to access this service.</p>
+          <p>If you think you should be granted access, please open an issue!</p>
+        </div>
+        {% endblock %}
 {% endraw %}