diff options
| author | Frederick Muriuki Muriithi | 2023-01-16 12:14:24 +0300 |
|---|---|---|
| committer | Frederick Muriuki Muriithi | 2023-01-16 12:14:24 +0300 |
| commit | 98dc0c5b1a67a7c7b97a1fa02211e9f99360edce (patch) | |
| tree | dc0c6f6bc82f11a4282be2dc1c2485340d68b7d0 /gn3/auth/authorisation/resources.py | |
| parent | 53371fb668d1d18ba4696b3e4739f26edd677d8d (diff) | |
| download | genenetwork3-98dc0c5b1a67a7c7b97a1fa02211e9f99360edce.tar.gz | |
auth: update privileges format
Save privileges with ids of the form <top-level>:<sub-level>:<privilege-name>
rather than using a UUID, to reduce indirection levels.
* migrations/auth/20230116_01_KwuJ3-rework-privileges-schema.py: new migration
to change the schema and IDs for the privileges.
* Update code to use new privileges format
* gn3/auth/authorisation/checks.py
* gn3/auth/authorisation/groups.py
* gn3/auth/authorisation/privileges.py
* gn3/auth/authorisation/resources.py
* gn3/auth/authorisation/roles.py
* migrations/auth/20230116_01_KwuJ3-rework-privileges-schema.py
* tests/unit/auth/fixtures/role_fixtures.py
* tests/unit/auth/test_groups.py
* tests/unit/auth/test_privileges.py
* tests/unit/auth/test_roles.py
Diffstat (limited to 'gn3/auth/authorisation/resources.py')
| -rw-r--r-- | gn3/auth/authorisation/resources.py | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/gn3/auth/authorisation/resources.py b/gn3/auth/authorisation/resources.py index bc6ba44..f27d61a 100644 --- a/gn3/auth/authorisation/resources.py +++ b/gn3/auth/authorisation/resources.py @@ -26,7 +26,8 @@ class Resource(NamedTuple): resource_category: ResourceCategory public: bool -@authorised_p(("create-resource",), error_message="Could not create resource") +@authorised_p(("group:resource:create-resource",), + error_message="Could not create resource") def create_resource( conn: db.DbConnection, resource_name: str, resource_category: ResourceCategory) -> Resource: |