From 45eb61f97423b6dcc77f3d30d83cfa01290bdc75 Mon Sep 17 00:00:00 2001 From: jasquat Date: Tue, 27 Dec 2022 11:56:09 -0500 Subject: [PATCH] give read access to process-data for all permission macro w/ burnettk --- .../src/spiffworkflow_backend/services/authorization_service.py | 1 + .../spiffworkflow_backend/unit/test_authorization_service.py | 2 ++ 2 files changed, 3 insertions(+) diff --git a/spiffworkflow-backend/src/spiffworkflow_backend/services/authorization_service.py b/spiffworkflow-backend/src/spiffworkflow_backend/services/authorization_service.py index fc6c31428..3c42b24af 100644 --- a/spiffworkflow-backend/src/spiffworkflow_backend/services/authorization_service.py +++ b/spiffworkflow-backend/src/spiffworkflow_backend/services/authorization_service.py @@ -73,6 +73,7 @@ PATH_SEGMENTS_FOR_PERMISSION_ALL = [ {"path": "/process-instance-suspend", "relevant_permissions": ["create"]}, {"path": "/process-instance-terminate", "relevant_permissions": ["create"]}, {"path": "/task-data", "relevant_permissions": ["read", "update"]}, + {"path": "/process-data", "relevant_permissions": ["read"]}, ] diff --git a/spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_authorization_service.py b/spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_authorization_service.py index adceeee80..51ccaf294 100644 --- a/spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_authorization_service.py +++ b/spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_authorization_service.py @@ -158,6 +158,7 @@ class TestAuthorizationService(BaseTest): """Test_explode_permissions_all_on_process_group.""" expected_permissions = [ ("/logs/some-process-group:some-process-model:*", "read"), + ("/process-data/some-process-group:some-process-model:*", "read"), ("/process-groups/some-process-group:some-process-model:*", "create"), ("/process-groups/some-process-group:some-process-model:*", "delete"), ("/process-groups/some-process-group:some-process-model:*", "read"), @@ -219,6 +220,7 @@ class TestAuthorizationService(BaseTest): """Test_explode_permissions_all_on_process_model.""" expected_permissions = [ ("/logs/some-process-group:some-process-model/*", "read"), + ("/process-data/some-process-group:some-process-model/*", "read"), ( "/process-instance-suspend/some-process-group:some-process-model/*", "create",