From 25eb8b30f1e62037e88f26b3b2fde5fc58a0de2f Mon Sep 17 00:00:00 2001 From: jasquat <2487833+jasquat@users.noreply.github.com> Date: Wed, 5 Jul 2023 14:47:15 -0400 Subject: [PATCH] give user access to pi for-me with all perm to process group w/ burnettk (#371) Co-authored-by: jasquat --- .../spiffworkflow_backend/services/authorization_service.py | 4 ++++ .../spiffworkflow_backend/unit/test_authorization_service.py | 2 ++ 2 files changed, 6 insertions(+) diff --git a/spiffworkflow-backend/src/spiffworkflow_backend/services/authorization_service.py b/spiffworkflow-backend/src/spiffworkflow_backend/services/authorization_service.py index 5f87b56fe..ba92f0e2e 100644 --- a/spiffworkflow-backend/src/spiffworkflow_backend/services/authorization_service.py +++ b/spiffworkflow-backend/src/spiffworkflow_backend/services/authorization_service.py @@ -75,6 +75,10 @@ PATH_SEGMENTS_FOR_PERMISSION_ALL = [ "path": "/process-instances", "relevant_permissions": ["create", "read", "delete"], }, + { + "path": "/process-instances/for-me", + "relevant_permissions": ["read"], + }, {"path": "/process-data", "relevant_permissions": ["read"]}, {"path": "/process-data-file-download", "relevant_permissions": ["read"]}, {"path": "/process-instance-suspend", "relevant_permissions": ["create"]}, diff --git a/spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_authorization_service.py b/spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_authorization_service.py index 0bfc2cc2d..9e3a2c0cc 100644 --- a/spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_authorization_service.py +++ b/spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_authorization_service.py @@ -129,6 +129,7 @@ class TestAuthorizationService(BaseTest): "/process-instances/some-process-group:some-process-model:*", "delete", ), + ("/process-instances/for-me/some-process-group:some-process-model:*", "read"), ("/process-instances/some-process-group:some-process-model:*", "read"), ("/process-model-natural-language/some-process-group:some-process-model:*", "create"), ("/process-model-publish/some-process-group:some-process-model:*", "create"), @@ -213,6 +214,7 @@ class TestAuthorizationService(BaseTest): "/process-instances/some-process-group:some-process-model/*", "delete", ), + ("/process-instances/for-me/some-process-group:some-process-model/*", "read"), ("/process-instances/some-process-group:some-process-model/*", "read"), ("/process-model-natural-language/some-process-group:some-process-model/*", "create"), ("/process-model-publish/some-process-group:some-process-model/*", "create"),