diff --git a/invenio_config_tuw/permissions/generators.py b/invenio_config_tuw/permissions/generators.py
index b31e9d5ef5e5707099a08cb4b7af8a2091cb64c8..7df658e309bc0038e5684778550e3f5d8ad35765 100644
--- a/invenio_config_tuw/permissions/generators.py
+++ b/invenio_config_tuw/permissions/generators.py
@@ -9,7 +9,7 @@ from flask import current_app
from flask_login import current_user
from flask_principal import RoleNeed, UserNeed
from invenio_access.permissions import any_user
-from invenio_rdm_records.services.generators import ConditionalGenerator, SecretLinks
+from invenio_rdm_records.services.generators import ConditionalGenerator
from invenio_records_permissions.generators import Generator
@@ -110,10 +110,3 @@ def TrustedPublisherForNewButTrustedUserForEdits(exclude=False):
then_=[TrustedRecordOwners(exclude=False)],
else_=[TrustedPublisherRecordOwners(exclude=False)],
)
-
-
-secret_links = {
- "edit": [SecretLinks("edit")],
- "view": [SecretLinks("edit"), SecretLinks("view")],
- "preview": [SecretLinks("edit"), SecretLinks("preview")],
-}
diff --git a/invenio_config_tuw/permissions/policies.py b/invenio_config_tuw/permissions/policies.py
index 2200112caaa17cfd006b96ef32432188977e543d..7e9fbc50557a0f2c28eae18cc02026140a9eb26e 100644
--- a/invenio_config_tuw/permissions/policies.py
+++ b/invenio_config_tuw/permissions/policies.py
@@ -19,6 +19,7 @@ from invenio_rdm_records.services.generators import (
RecordCommunitiesAction,
RecordOwners,
ResourceAccessToken,
+ SecretLinks,
SubmissionReviewer,
)
from invenio_rdm_records.services.permissions import (
@@ -39,7 +40,6 @@ from .generators import (
TrustedPublisherForNewButTrustedUserForEdits,
TrustedRecordOwners,
TrustedUsers,
- secret_links,
)
@@ -53,6 +53,13 @@ def IfRestrictedAllowed(then_):
return IfConfig("RDM_ALLOW_RESTRICTED_RECORDS", then_=then_, else_=[])
+secret_links = {
+ "edit": [SecretLinks("edit")],
+ "view": [SecretLinks("edit"), SecretLinks("view")],
+ "preview": [SecretLinks("edit"), SecretLinks("preview")],
+}
+
+
class TUWRecordPermissionPolicy(RDMRecordPermissionPolicy):
"""Record permission policy of TU Wien."""