From 36868b6052c76cf5cd28cb8aa6eddd4771b90a14 Mon Sep 17 00:00:00 2001
From: Dan <daniel.h.funk@gmail.com>
Date: Fri, 25 Nov 2022 13:31:01 -0500
Subject: [PATCH] Change permissions per request -- want everyone to have
 access to 4 process models.

---
 .../terraform_deployed_environment.yml        | 77 ++++++++-----------
 1 file changed, 34 insertions(+), 43 deletions(-)

diff --git a/spiffworkflow-backend/src/spiffworkflow_backend/config/permissions/terraform_deployed_environment.yml b/spiffworkflow-backend/src/spiffworkflow_backend/config/permissions/terraform_deployed_environment.yml
index eb33e1fd..3a01062e 100644
--- a/spiffworkflow-backend/src/spiffworkflow_backend/config/permissions/terraform_deployed_environment.yml
+++ b/spiffworkflow-backend/src/spiffworkflow_backend/config/permissions/terraform_deployed_environment.yml
@@ -58,6 +58,16 @@ groups:
         lead1,
       ]
 
+  demo:
+    users:
+      [
+        core,
+        fin,
+        fin1,
+        lead,
+        lead1
+      ]
+
   core-contributor:
     users: [core]
 
@@ -136,58 +146,39 @@ permissions:
     groups: ["Finance Team"]
     users: []
     allowed_permissions: [create, read, update, delete]
-    uri: /v1.0/process-groups/manage-procurement:procurement:core-contributor-invoice-management:*
-  finance-admin-slash:
-    groups: ["Finance Team"]
-    users: []
-    allowed_permissions: [create, read, update, delete]
-    uri: /v1.0/process-groups/manage-procurement:procurement:core-contributor-invoice-management/*
-  finance-admin-models:
-    groups: ["Finance Team"]
-    users: []
-    allowed_permissions: [create, read, update, delete]
-    uri: /v1.0/process-models/manage-procurement:procurement:core-contributor-invoice-management:*
-  finance-admin-models-slash:
-    groups: ["Finance Team"]
-    users: []
-    allowed_permissions: [create, read, update, delete]
-    uri: /v1.0/process-models/manage-procurement:procurement:core-contributor-invoice-management/*
-  finance-admin-instances:
-    groups: ["Finance Team"]
-    users: []
-    allowed_permissions: [create, read, update, delete]
-    uri: /v1.0/process-instances/manage-procurement:procurement:core-contributor-invoice-management:*
-  finance-admin-instances-slash:
-    groups: ["Finance Team"]
-    users: []
-    allowed_permissions: [create, read, update, delete]
-    uri: /v1.0/process-instances/manage-procurement:procurement:core-contributor-invoice-management/*
+    uri: /v1.0/process-groups/manage-procurement:procurement:*
 
-  core-admin:
-    groups: ["core-contributor"]
+  demo-models-instantiate-vendor-block:
+    groups: ["demo"]
     users: []
-    allowed_permissions: [read]
-    uri: /v1.0/process-groups/manage-procurement:procurement:core-contributor-invoice-management:*
-  core-admin-slash:
-    groups: ["core-contributor"]
+    allowed_permissions: [create]
+    uri: /v1.0/process-models/manage-procurement:vendor-lifecycle-management:vendor-md-maintenance:vendor-md-block/process-instances
+  demo-models-instantiate-vendor-change:
+    groups: ["demo"]
     users: []
-    allowed_permissions: [read]
-    uri: /v1.0/process-groups/manage-procurement:procurement:core-contributor-invoice-management/*
-  core-admin-models:
-    groups: ["core-contributor"]
+    allowed_permissions: [create]
+    uri: /v1.0/process-models/manage-procurement:vendor-lifecycle-management:vendor-md-maintenance:vendor-md-change/process-instances
+  demo-models-instantiate-vendor-creation:
+    groups: ["demo"]
     users: []
-    allowed_permissions: [read]
-    uri: /v1.0/process-models/manage-procurement:procurement:core-contributor-invoice-management:*
-  core-admin-models-slash:
-    groups: ["core-contributor"]
+    allowed_permissions: [create]
+    uri: /v1.0/process-models/manage-procurement:vendor-lifecycle-management:vendor-md-maintenance:vendor-md-creation/process-instances
+  demo-models-instantiate-invoice-approval:
+    groups: ["demo"]
     users: []
-    allowed_permissions: [read]
-    uri: /v1.0/process-models/manage-procurement:procurement:core-contributor-invoice-management/*
+    allowed_permissions: [create]
+    uri: /v1.0/process-models/manage-procurement:procurement:vendor-invoice-management:invoice-approval/process-instances
+  demo-models-instantiate-vendor-core-invoice_appoval:
+    groups: ["demo"]
+    users: []
+    allowed_permissions: [create]
+    uri: /v1.0/process-models/manage-procurement:procurement:core-contributor-invoice-management:cc-invoice-approval/process-instances
+
   core-admin-models-instantiate:
     groups: ["core-contributor"]
     users: []
     allowed_permissions: [create]
-    uri: /v1.0/process-models/manage-procurement:procurement:core-contributor-invoice-management:invoice-approval/process-instances
+    uri: /v1.0/process-models/manage-procurement:procurement:core-contributor-invoice-management:cc-invoice-approval/process-instances
   core-admin-instances:
     groups: ["core-contributor"]
     users: []