sartography/spiff-arena
1
0
Fork 0
mirror of https://github.com/sartography/spiff-arena.git synced 2025-01-27 09:45:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

added permissions for authentication endpoints

Browse Source
This commit is contained in:
jasquat 2023-08-24 08:37:01 -04:00
parent 487ce87699
commit d58391e21d
2 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
spiffworkflow-backend/src/spiffworkflow_backend/services/authorization_service.py
View File

@ -538,6 +538,12 @@ class AuthorizationService:
for permission in ["create", "read", "update", "delete"]: for permission in ["create", "read", "update", "delete"]:
permissions_to_assign.append(PermissionToAssign(permission=permission, target_uri="/secrets/*")) permissions_to_assign.append(PermissionToAssign(permission=permission, target_uri="/secrets/*"))
permissions_to_assign.append(PermissionToAssign(permission="read", target_uri="/authentication/configuration"))
permissions_to_assign.append(PermissionToAssign(permission="read", target_uri="/authentication_begin/*"))
permissions_to_assign.append(
PermissionToAssign(permission="update", target_uri="/authentication/configuration")
)
return permissions_to_assign return permissions_to_assign
@classmethod @classmethod

3
spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_authorization_service.py
View File

@ -508,6 +508,9 @@ class TestAuthorizationService(BaseTest):
return sorted( return sorted(
self._expected_support_permissions() self._expected_support_permissions()
+ [ + [
("/authentication/configuration", "read"),
("/authentication/configuration", "update"),
("/authentication_begin/*", "read"),
("/secrets/*", "create"), ("/secrets/*", "create"),
("/secrets/*", "delete"), ("/secrets/*", "delete"),
("/secrets/*", "read"), ("/secrets/*", "read"),