diff options
| author | Frederick Muriuki Muriithi | 2026-08-26 09:01:42 -0500 |
|---|---|---|
| committer | Frederick Muriuki Muriithi | 2026-08-26 09:01:42 -0500 |
| commit | 19380ef2fc02e4707065ce2d47b201227098841f (patch) | |
| tree | e503733c567b858c869fe1bca64a063ecd25cfea | |
| parent | f46c41d7118d4f1e9abd3c4f5f0338cc515b4735 (diff) | |
| download | gn-libs-19380ef2fc02e4707065ce2d47b201227098841f.tar.gz | |
Bugfix: Remove extraneous privilege.
The `system:inbredset:[create/delete]-case-attribute` privileges do not deal with the values like the *-[apply/reject]-* privileges do, rather they act at a level above, where they deal with the "entity" itself rather than just the value. This commit fixes that.
| -rw-r--r-- | gn_libs/privileges/resources.py | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/gn_libs/privileges/resources.py b/gn_libs/privileges/resources.py index 2634357..d2131e9 100644 --- a/gn_libs/privileges/resources.py +++ b/gn_libs/privileges/resources.py @@ -71,12 +71,10 @@ can_apply_or_reject_edit = partial( resource_spec=( "(AND system:inbredset:view-case-attribute " " system:inbredset:edit-case-attribute " - " system:inbredset:delete-case-attribute " " system:inbredset:apply-case-attribute-edit " " system:inbredset:reject-case-attribute-edit)"), system_spec=( "(AND system:system-wide:inbredset:view-case-attribute " " system:system-wide:inbredset:edit-case-attribute " - " system:system-wide:inbredset:delete-case-attribute " " system:system-wide:inbredset:apply-case-attribute-edit " " system:system-wide:inbredset:reject-case-attribute-edit)")) |