sartography
/
spiff-arena
mirror of https://github.com/sartography/spiff-arena.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

process instances for-me is a basic permissions thing needed by everyone

This commit is contained in:
burnettk 2024-01-30 12:16:46 -05:00
parent 5c352a87d7
commit 40b9570e22
No known key found for this signature in database
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
spiffworkflow-backend/src/spiffworkflow_backend/services/authorization_service.py
View File

@ -518,7 +518,12 @@ class AuthorizationService:
def set_basic_permissions(cls) -> list[PermissionToAssign]:
permissions_to_assign: list[PermissionToAssign] = []
permissions_to_assign.append(PermissionToAssign(permission="create", target_uri="/active-users/*"))
# gets lists of instances (we use a POST with a json body because there are complex filters, hence the create)
permissions_to_assign.append(PermissionToAssign(permission="create", target_uri="/process-instances/for-me"))
# view individual instances that require my attention
permissions_to_assign.append(PermissionToAssign(permission="read", target_uri="/process-instances/for-me/*"))
permissions_to_assign.append(PermissionToAssign(permission="create", target_uri="/users/exists/by-username"))
permissions_to_assign.append(PermissionToAssign(permission="read", target_uri="/connector-proxy/typeahead/*"))
permissions_to_assign.append(PermissionToAssign(permission="read", target_uri="/debug/version-info"))

1
spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_authorization_service.py
View File

@ -449,6 +449,7 @@ class TestAuthorizationService(BaseTest):
("/process-groups", "read"),
("/process-instances/find-by-id/*", "read"),
("/process-instances/for-me", "create"),
("/process-instances/for-me/*", "read"),
("/process-instances/report-metadata", "read"),
("/process-instances/reports/*", "create"),
("/process-instances/reports/*", "delete"),