From 5c0b9077320d62ac26685dc37291c18d3670fb98 Mon Sep 17 00:00:00 2001 From: Frederick Muriuki Muriithi Date: Tue, 29 Jul 2025 09:43:33 -0500 Subject: Add system-wide resource-access privileges for system administrators System administrators need to access, and modify the resources in the system, and to do that, we need to grant them specific privileges to check against. These privileges act on the wrapper resource objects, not necessarily the data attached to the resource object. --- gn_auth/auth/authorisation/resources/views.py | 1 - 1 file changed, 1 deletion(-) (limited to 'gn_auth/auth/authorisation/resources/views.py') diff --git a/gn_auth/auth/authorisation/resources/views.py b/gn_auth/auth/authorisation/resources/views.py index f497219..b52e972 100644 --- a/gn_auth/auth/authorisation/resources/views.py +++ b/gn_auth/auth/authorisation/resources/views.py @@ -684,7 +684,6 @@ def delete_resource() -> Response: form = request_json() try: resource_id = UUID(form.get("resource_id")) - # TODO Add migrations to set up new privileges (system:resource:*) # TODO Add migrations to grant privileges (system:resource:*) to admin users # TODO Update resource creation to grant privileges (system:resource:*) to admin users # TODO Update user-levels promotion/demotion to grant/revoke (system:resource:*) to/from admin users -- cgit 1.4.1