Mercurial > p > roundup > code
diff share/roundup/templates/jinja2/schema.py @ 5879:94a7669677ae
add permissions to control user of rest and xmlrpc API interfaces.
issue2551058: Add new permissions: 'Rest Access' and 'Xmlrpc Access'
to allow per-user access control to rest and xmlrpc interfaces using
roles.
Updated all schemas to add these new perms to all authenticated roles.
Error conditions in handle_xmlrpc were not working right in manual
testing. I tried to make it a little better, but I don't actually
understand how the fault xmlrpc object is supposed to be used. So I
may have messed something up. I'll try to ping the people who wrote
the xmlrpc code to have them review.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Fri, 27 Sep 2019 23:29:59 -0400 |
| parents | cf112b90fa8d |
| children | bae060c8a5ac |
line wrap: on
line diff
--- a/share/roundup/templates/jinja2/schema.py Fri Sep 27 20:38:31 2019 -0400 +++ b/share/roundup/templates/jinja2/schema.py Fri Sep 27 23:29:59 2019 -0400 @@ -89,6 +89,8 @@ # Give the regular users access to the web and email interface db.security.addPermissionToRole('User', 'Web Access') db.security.addPermissionToRole('User', 'Email Access') +db.security.addPermissionToRole('User', 'Rest Access') +db.security.addPermissionToRole('User', 'Xmlrpc Access') # Assign the access and edit Permissions for issue, file and message # to regular users now