diff --git a/spiffworkflow-backend/src/spiffworkflow_backend/services/authorization_service.py b/spiffworkflow-backend/src/spiffworkflow_backend/services/authorization_service.py index 5f87b56f..ba92f0e2 100644 --- a/spiffworkflow-backend/src/spiffworkflow_backend/services/authorization_service.py +++ b/spiffworkflow-backend/src/spiffworkflow_backend/services/authorization_service.py @@ -75,6 +75,10 @@ PATH_SEGMENTS_FOR_PERMISSION_ALL = [ "path": "/process-instances", "relevant_permissions": ["create", "read", "delete"], }, + { + "path": "/process-instances/for-me", + "relevant_permissions": ["read"], + }, {"path": "/process-data", "relevant_permissions": ["read"]}, {"path": "/process-data-file-download", "relevant_permissions": ["read"]}, {"path": "/process-instance-suspend", "relevant_permissions": ["create"]}, diff --git a/spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_authorization_service.py b/spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_authorization_service.py index 0bfc2cc2..9e3a2c0c 100644 --- a/spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_authorization_service.py +++ b/spiffworkflow-backend/tests/spiffworkflow_backend/unit/test_authorization_service.py @@ -129,6 +129,7 @@ class TestAuthorizationService(BaseTest): "/process-instances/some-process-group:some-process-model:*", "delete", ), + ("/process-instances/for-me/some-process-group:some-process-model:*", "read"), ("/process-instances/some-process-group:some-process-model:*", "read"), ("/process-model-natural-language/some-process-group:some-process-model:*", "create"), ("/process-model-publish/some-process-group:some-process-model:*", "create"), @@ -213,6 +214,7 @@ class TestAuthorizationService(BaseTest): "/process-instances/some-process-group:some-process-model/*", "delete", ), + ("/process-instances/for-me/some-process-group:some-process-model/*", "read"), ("/process-instances/some-process-group:some-process-model/*", "read"), ("/process-model-natural-language/some-process-group:some-process-model/*", "create"), ("/process-model-publish/some-process-group:some-process-model/*", "create"),