diff options
| author | Frederick Muriuki Muriithi | 2026-03-31 10:56:13 -0500 |
|---|---|---|
| committer | Frederick Muriuki Muriithi | 2026-03-31 10:56:13 -0500 |
| commit | 3fb1c3e614f659975f9601b654c8bd11750283d8 (patch) | |
| tree | 814d6464963f6d4eb2787e71804859d05bf5d3bd | |
| parent | 968bacb5968eef5a272e1a6375f5f72a5c991c6b (diff) | |
| download | gn-libs-3fb1c3e614f659975f9601b654c8bd11750283d8.tar.gz | |
Check for applying/rejecting edits for resources requiring review.
Some resources, when edited by a user, might require that those changes be reviewed and either applied or rejected by a different reviewer.
| -rw-r--r-- | gn_libs/privileges/resources.py | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/gn_libs/privileges/resources.py b/gn_libs/privileges/resources.py index 431ccd3..14d0ad1 100644 --- a/gn_libs/privileges/resources.py +++ b/gn_libs/privileges/resources.py @@ -57,3 +57,19 @@ can_delete = partial( " system:system-wide:data:delete) " " (AND system:resource:view system:resource:edit " " system:resource:delete))")) + + +can_apply_or_reject_edit = partial( + privileges_fulfill_specs, + resource_spec=( + "(AND system:inbredset:view-case-attribute " + " system:inbredset:edit-case-attribute " + " system:inbredset:delete-case-attribute " + " system:inbredset:apply-case-attribute-edit " + " system:inbredset:reject-case-attribute-edit)"), + system_spec=( + "(AND system:system-wide:inbredset:view-case-attribute " + " system:system-wide:inbredset:edit-case-attribute " + " system:system-wide:inbredset:delete-case-attribute " + " system:system-wide:inbredset:apply-case-attribute-edit " + " system:system-wide:inbredset:reject-case-attribute-edit)")) |