From 19380ef2fc02e4707065ce2d47b201227098841f Mon Sep 17 00:00:00 2001 From: Frederick Muriuki Muriithi Date: Wed, 26 Aug 2026 09:01:42 -0500 Subject: Bugfix: Remove extraneous privilege. The `system:inbredset:[create/delete]-case-attribute` privileges do not deal with the values like the *-[apply/reject]-* privileges do, rather they act at a level above, where they deal with the "entity" itself rather than just the value. This commit fixes that. --- gn_libs/privileges/resources.py | 2 -- 1 file changed, 2 deletions(-) diff --git a/gn_libs/privileges/resources.py b/gn_libs/privileges/resources.py index 2634357..d2131e9 100644 --- a/gn_libs/privileges/resources.py +++ b/gn_libs/privileges/resources.py @@ -71,12 +71,10 @@ can_apply_or_reject_edit = partial( resource_spec=( "(AND system:inbredset:view-case-attribute " " system:inbredset:edit-case-attribute " - " system:inbredset:delete-case-attribute " " system:inbredset:apply-case-attribute-edit " " system:inbredset:reject-case-attribute-edit)"), system_spec=( "(AND system:system-wide:inbredset:view-case-attribute " " system:system-wide:inbredset:edit-case-attribute " - " system:system-wide:inbredset:delete-case-attribute " " system:system-wide:inbredset:apply-case-attribute-edit " " system:system-wide:inbredset:reject-case-attribute-edit)")) -- cgit 1.4.1