Mercurial > p > roundup > code
diff share/roundup/templates/devel/schema.py @ 5879:94a7669677ae
add permissions to control user of rest and xmlrpc API interfaces.
issue2551058: Add new permissions: 'Rest Access' and 'Xmlrpc Access'
to allow per-user access control to rest and xmlrpc interfaces using
roles.
Updated all schemas to add these new perms to all authenticated roles.
Error conditions in handle_xmlrpc were not working right in manual
testing. I tried to make it a little better, but I don't actually
understand how the fault xmlrpc object is supposed to be used. So I
may have messed something up. I'll try to ping the people who wrote
the xmlrpc code to have them review.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Fri, 27 Sep 2019 23:29:59 -0400 |
| parents | 602d544e3a93 |
| children | c087ad45bf4d |
line wrap: on
line diff
--- a/share/roundup/templates/devel/schema.py Fri Sep 27 20:38:31 2019 -0400 +++ b/share/roundup/templates/devel/schema.py Fri Sep 27 23:29:59 2019 -0400 @@ -205,7 +205,9 @@ for r in 'User', 'Developer', 'Coordinator': db.security.addPermissionToRole(r, 'Web Access') db.security.addPermissionToRole(r, 'Email Access') - + db.security.addPermissionToRole(r, 'Rest Access') + db.security.addPermissionToRole(r, 'Xmlrpc Access') + ########################## # User permissions ##########################