fixed permissions w/ burnettk

spiffworkflow-backend/src/spiffworkflow_backend/config/permissions/acceptance_tests.yml

@@ -9,5 +9,5 @@ permissions:
   admin:
     groups: [admin, common-user]
     users: []
-    allowed_permissions: [create, read, update, delete, list, instantiate]
+    allowed_permissions: [create, read, update, delete]
     uri: /*

spiffworkflow-backend/src/spiffworkflow_backend/config/permissions/development.yml

@@ -20,7 +20,6 @@ groups:
         jarrad,
         elizabeth,
         jon,
-        natalia,
       ]
 
   Finance Team:
@@ -35,7 +34,6 @@ groups:
         jarrad,
         elizabeth,
         jon,
-        natalia,
         sasha,
         fin,
         fin1,
@@ -68,6 +66,9 @@ groups:
         j,
       ]
 
+  test:
+    users: [natalia]
+
 permissions:
   admin:
     groups: [admin]
@@ -129,12 +130,6 @@ permissions:
     users: []
     allowed_permissions: [read]
     uri: /v1.0/processes
-  #
-  # task-data-read:
-  #   groups: [demo]
-  #   users: []
-  #   allowed_permissions: [read]
-  #   uri: /v1.0/task-data/*
 
 
   manage-procurement-admin:
@@ -174,44 +169,30 @@ permissions:
     allowed_permissions: [create, read, update, delete]
     uri: /v1.0/process-groups/manage-procurement:procurement:*
 
-  manage-revenue-streams-instantiate:
-    groups: ["core-contributor", "demo"]
-    users: []
-    allowed_permissions: [create]
-    uri: /v1.0/process-models/manage-revenue-streams:product-revenue-streams:customer-contracts-trade-terms/*
   manage-revenue-streams-instances:
     groups: ["core-contributor", "demo"]
     users: []
     allowed_permissions: [create, read]
     uri: /v1.0/process-instances/manage-revenue-streams:product-revenue-streams:customer-contracts-trade-terms/*
 
-  manage-procurement-invoice-instantiate:
-    groups: ["core-contributor", "demo"]
-    users: []
-    allowed_permissions: [create]
-    uri: /v1.0/process-models/manage-procurement:procurement:core-contributor-invoice-management:*
   manage-procurement-invoice-instances:
     groups: ["core-contributor", "demo"]
     users: []
     allowed_permissions: [create, read]
     uri: /v1.0/process-instances/manage-procurement:procurement:core-contributor-invoice-management:*
 
-  manage-procurement-instantiate:
-    groups: ["core-contributor", "demo"]
-    users: []
-    allowed_permissions: [create]
-    uri: /v1.0/process-models/manage-procurement:vendor-lifecycle-management:*
   manage-procurement-instances:
     groups: ["core-contributor", "demo"]
     users: []
     allowed_permissions: [create, read]
     uri: /v1.0/process-instances/manage-procurement:vendor-lifecycle-management:*
 
-  core1-admin-models-instantiate:
+  create-test-instances:
-    groups: ["core-contributor", "Finance Team"]
+    groups: ["test"]
     users: []
-    allowed_permissions: [create]
+    allowed_permissions: [create, read]
-    uri: /v1.0/process-models/misc:category_number_one:process-model-with-form/process-instances
+    uri: /v1.0/process-instances/misc:test:*
+
   core1-admin-instances:
     groups: ["core-contributor", "Finance Team"]
     users: []

spiffworkflow-backend/src/spiffworkflow_backend/config/permissions/staging.yml

@@ -80,6 +80,11 @@ permissions:
     users: []
     allowed_permissions: [read]
     uri: /v1.0/service-tasks
+  user-groups-for-current-user:
+    groups: [everybody]
+    users: []
+    allowed_permissions: [read]
+    uri: /v1.0/user-groups/for-current-user
 
 
   # read all for everybody

spiffworkflow-backend/src/spiffworkflow_backend/config/permissions/terraform_deployed_environment.yml

@@ -75,6 +75,11 @@ permissions:
     users: []
     allowed_permissions: [read]
     uri: /v1.0/service-tasks
+  user-groups-for-current-user:
+    groups: [everybody]
+    users: []
+    allowed_permissions: [read]
+    uri: /v1.0/user-groups/for-current-user
 
 
   # read all for everybody
@@ -104,12 +109,6 @@ permissions:
     allowed_permissions: [read]
     uri: /v1.0/processes
 
-  task-data-read:
-    groups: [demo]
-    users: []
-    allowed_permissions: [read]
-    uri: /v1.0/task-data/*
-
 
   manage-procurement-admin:
     groups: ["Project Lead"]