Redo export RBAC rules

This commit is contained in:
Tomaž Jerman
2024-12-11 15:35:16 +01:00
committed by Jože Fortun
parent 7546d40ae9
commit a1484098f0
9 changed files with 7 additions and 76 deletions
-52
View File
@@ -167,11 +167,6 @@ func (svc accessControl) List() (out []map[string]string) {
"any": types.ChartRbacResource(0, 0),
"op": "delete",
},
{
"type": types.ChartResourceType,
"any": types.ChartRbacResource(0, 0),
"op": "export",
},
{
"type": types.ModuleResourceType,
"any": types.ModuleRbacResource(0, 0),
@@ -187,11 +182,6 @@ func (svc accessControl) List() (out []map[string]string) {
"any": types.ModuleRbacResource(0, 0),
"op": "delete",
},
{
"type": types.ModuleResourceType,
"any": types.ModuleRbacResource(0, 0),
"op": "export",
},
{
"type": types.ModuleResourceType,
"any": types.ModuleRbacResource(0, 0),
@@ -282,11 +272,6 @@ func (svc accessControl) List() (out []map[string]string) {
"any": types.NamespaceRbacResource(0),
"op": "pages.search",
},
{
"type": types.NamespaceResourceType,
"any": types.NamespaceRbacResource(0),
"op": "pages.export",
},
{
"type": types.PageResourceType,
"any": types.PageRbacResource(0, 0),
@@ -302,11 +287,6 @@ func (svc accessControl) List() (out []map[string]string) {
"any": types.PageRbacResource(0, 0),
"op": "delete",
},
{
"type": types.PageResourceType,
"any": types.PageRbacResource(0, 0),
"op": "export",
},
{
"type": types.PageResourceType,
"any": types.PageRbacResource(0, 0),
@@ -505,13 +485,6 @@ func (svc accessControl) CanDeleteChart(ctx context.Context, r *types.Chart) boo
return svc.can(ctx, "delete", r)
}
// CanExportChart checks if current user can access to export charts
//
// This function is auto-generated
func (svc accessControl) CanExportChart(ctx context.Context, r *types.Chart) bool {
return svc.can(ctx, "export", r)
}
// CanReadModule checks if current user can read
//
// This function is auto-generated
@@ -533,13 +506,6 @@ func (svc accessControl) CanDeleteModule(ctx context.Context, r *types.Module) b
return svc.can(ctx, "delete", r)
}
// CanExportModule checks if current user can access to export modules
//
// This function is auto-generated
func (svc accessControl) CanExportModule(ctx context.Context, r *types.Module) bool {
return svc.can(ctx, "export", r)
}
// CanCreateRecordOnModule checks if current user can create record
//
// This function is auto-generated
@@ -666,13 +632,6 @@ func (svc accessControl) CanSearchPagesOnNamespace(ctx context.Context, r *types
return svc.can(ctx, "pages.search", r)
}
// CanExportPagesOnNamespace checks if current user can export pages on namespace
//
// This function is auto-generated
func (svc accessControl) CanExportPagesOnNamespace(ctx context.Context, r *types.Namespace) bool {
return svc.can(ctx, "pages.export", r)
}
// CanReadPage checks if current user can read
//
// This function is auto-generated
@@ -694,13 +653,6 @@ func (svc accessControl) CanDeletePage(ctx context.Context, r *types.Page) bool
return svc.can(ctx, "delete", r)
}
// CanExportPage checks if current user can access to export pages
//
// This function is auto-generated
func (svc accessControl) CanExportPage(ctx context.Context, r *types.Page) bool {
return svc.can(ctx, "export", r)
}
// CanCreatePageLayoutOnPage checks if current user can create page layout on namespace
//
// This function is auto-generated
@@ -932,14 +884,12 @@ func rbacResourceOperations(r string) map[string]bool {
"read": true,
"update": true,
"delete": true,
"export": true,
}
case types.ModuleResourceType:
return map[string]bool{
"read": true,
"update": true,
"delete": true,
"export": true,
"record.create": true,
"owned-record.create": true,
"records.search": true,
@@ -964,14 +914,12 @@ func rbacResourceOperations(r string) map[string]bool {
"charts.export": true,
"page.create": true,
"pages.search": true,
"pages.export": true,
}
case types.PageResourceType:
return map[string]bool{
"read": true,
"update": true,
"delete": true,
"export": true,
"page-layout.create": true,
"page-layouts.search": true,
}