Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Changing domain manager permissions #858

Closed
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions backend/core/startup.py
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The task's subject was to allow the creation, edition and deletion of a ReferenceControl, not AppliedControl. Furthermore, view_appliedcontrol is present twice in the list. Once on line 132 and once on line 179.
For the first point, after reading my own comment under the ticket, I realized I wrote _appliedcontrol. My mistake. Still, a domain manager has no business managing applied controls 😉

Copy link
Collaborator

@eric-intuitem eric-intuitem Sep 30, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's keep it simple: a domain manager can do anything in its domain. The single exception is approval.
| Domain manager | full access to selected domains (except approval), in particular managing rights for these domains. Read access to global objects |

Original file line number Diff line number Diff line change
Expand Up @@ -176,6 +176,9 @@
"view_user",
"view_requirementmappingset",
"view_requirementmapping",
"view_appliedcontrol",
"change_appliedcontrol",
"delete_appliedcontrol",
]

ADMINISTRATOR_PERMISSIONS_LIST = [
Expand Down
Loading