Project

General

Profile

« Previous | Next » 

Revision 7cb41918

Added by Daniel Lobato Garcia almost 10 years ago

Fixes #3976 - Add all view_ permissions to viewer user role

This PR tests that there is a match between foreman access control and
permissions seeded by the db script. It also checks all seeded view_
permissions are part of the viewer role.

View differences:

db/seeds.d/03-permissions.rb
['ConfigTemplate', 'destroy_templates'],
['ConfigTemplate', 'deploy_templates'],
['ConfigTemplate', 'lock_templates'],
['ConfigGroup', 'view_config_groups'],
['ConfigGroup', 'create_config_groups'],
['ConfigGroup', 'edit_config_groups'],
['ConfigGroup', 'destroy_config_groups'],
[nil, 'access_dashboard'],
['Domain', 'view_domains'],
['Domain', 'create_domains'],
......
['Environment', 'edit_environments'],
['Environment', 'destroy_environments'],
['Environment', 'import_environments'],
['ExternalUsergroups', 'view_external_usergroups'],
['ExternalUsergroups', 'create_external_usergroups'],
['ExternalUsergroups', 'edit_external_usergroups'],
['ExternalUsergroups', 'destroy_external_usergroups'],
['LookupKey', 'view_external_variables'],
['LookupKey', 'create_external_variables'],
['LookupKey', 'edit_external_variables'],
......
permissions.each do |resource, permission|
Permission.find_or_create_by_resource_type_and_name resource, permission
end

Also available in: Unified diff