diff options
author | Frederick Muriuki Muriithi | 2025-07-29 09:43:33 -0500 |
---|---|---|
committer | Frederick Muriuki Muriithi | 2025-07-29 10:15:14 -0500 |
commit | 5c0b9077320d62ac26685dc37291c18d3670fb98 (patch) | |
tree | d3bd9a4d44803473fce41efab2c3facdb68a10ef /gn_auth/auth/authorisation | |
parent | 065d97043611b0892dc56b813db87d943c67ec7d (diff) | |
download | gn-auth-5c0b9077320d62ac26685dc37291c18d3670fb98.tar.gz |
Add system-wide resource-access privileges for system administrators
System administrators need to access, and modify the resources in the system, and to do that, we need to grant them specific privileges to check against. These privileges act on the wrapper resource objects, not necessarily the data attached to the resource object.
Diffstat (limited to 'gn_auth/auth/authorisation')
-rw-r--r-- | gn_auth/auth/authorisation/resources/views.py | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/gn_auth/auth/authorisation/resources/views.py b/gn_auth/auth/authorisation/resources/views.py index f497219..b52e972 100644 --- a/gn_auth/auth/authorisation/resources/views.py +++ b/gn_auth/auth/authorisation/resources/views.py @@ -684,7 +684,6 @@ def delete_resource() -> Response: form = request_json() try: resource_id = UUID(form.get("resource_id")) - # TODO Add migrations to set up new privileges (system:resource:*) # TODO Add migrations to grant privileges (system:resource:*) to admin users # TODO Update resource creation to grant privileges (system:resource:*) to admin users # TODO Update user-levels promotion/demotion to grant/revoke (system:resource:*) to/from admin users |