Fixes #36663 - Add permission to modify LookupValue resource

This is necessary when using gql to allow non-admin users to modify lookup-key values.
theforeman · Aug 29, 2023 · f19588c · f19588c
1 parent 17ae808
commit f19588c
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/app/registries/foreman/access_permissions.rb b/app/registries/foreman/access_permissions.rb
@@ -639,4 +639,11 @@
     map.permission :edit_settings, { :settings => [:update],
                                      :'api/v2/settings' => [:update] }
   end
+
+  permission_set.security_block :lookup_values do |map|
+    map.permission :view_lookup_values, {:lookup_values => [:index]}
+    map.permission :create_lookup_values, {:lookup_values => [:create]}
+    map.permission :edit_lookup_values, {:lookup_values => [:update]}
+    map.permission :destroy_lookup_values, {:lookup_values => [:destroy]}
+  end
 end
diff --git a/db/seeds.d/020-permissions_list.rb b/db/seeds.d/020-permissions_list.rb
@@ -76,6 +76,10 @@ def permissions
         ['Location', 'edit_locations'],
         ['Location', 'destroy_locations'],
         ['Location', 'assign_locations'],
+        ['LookupValue', 'view_lookup_values'],
+        ['LookupValue', 'create_lookup_values'],
+        ['LookupValue', 'edit_lookup_values'],
+        ['LookupValue', 'destroy_lookup_values'],
         ['MailNotification', 'view_mail_notifications'],
         ['MailNotification', 'edit_user_mail_notifications'],
         ['Medium', 'view_media'],