diff options
| author | Frederick Muriuki Muriithi | 2022-11-24 13:53:59 +0300 |
|---|---|---|
| committer | Frederick Muriuki Muriithi | 2022-11-24 13:53:59 +0300 |
| commit | 9810731b8432624c3817633ea0877dd80d0eea39 (patch) | |
| tree | e30a620e9d549c6df19c80e3e27f0ac59cd7cb6e /gn3/auth/authorisation/roles.py | |
| parent | 021b8dfcb99928b363e4546f626e3deb5793e392 (diff) | |
| download | genenetwork3-9810731b8432624c3817633ea0877dd80d0eea39.tar.gz | |
auth: Check for authentication and fix errors
* gn3/auth/authorisation/groups.py: base `MembershipError` on new
`AuthorisationError` base exception. Use new authentication checking
decorator.
* gn3/auth/authorisation/privileges.py: Change argument to User object rather
than UUID object
* gn3/auth/authorisation/roles.py: Use new authentication checking decorator.
* tests/unit/auth/test_groups.py: use `conftest.TEST_USER`
* tests/unit/auth/test_privileges.py: use `conftest.TEST_USER`
* tests/unit/auth/test_roles.py: use `conftest.TEST_USER`
Diffstat (limited to 'gn3/auth/authorisation/roles.py')
| -rw-r--r-- | gn3/auth/authorisation/roles.py | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/gn3/auth/authorisation/roles.py b/gn3/auth/authorisation/roles.py index 8435c40..397ad80 100644 --- a/gn3/auth/authorisation/roles.py +++ b/gn3/auth/authorisation/roles.py @@ -3,6 +3,7 @@ from uuid import UUID, uuid4 from typing import Iterable, NamedTuple from gn3.auth import db +from gn3.auth.authentication.checks import authenticated_p from .checks import authorised_p from .privileges import Privilege @@ -13,6 +14,7 @@ class Role(NamedTuple): role_name: str privileges: Iterable[Privilege] +@authenticated_p @authorised_p(("create-role",), error_message="Could not create role") def create_role( cursor: db.DbCursor, role_name: str, |