scinote-eln/scinote-web
1
1
Fork 0
mirror of https://github.com/scinote-eln/scinote-web.git synced 2025-10-26 14:06:23 +08:00
Code Issues Projects Releases Packages Wiki Activity

Remove repository column management permissions for user [SCI-12057]

Browse source
This commit is contained in:
Andrej 2025-07-09 10:54:48 +02:00
parent d4998fa9ba
commit ca7c7ca16b
3 changed files with 22 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/controllers/repositories_controller.rb
View file

@ -536,7 +536,7 @@ class RepositoriesController < ApplicationController
end end
def check_view_all_permissions def check_view_all_permissions
render_403 unless can_read_team?(current_team) render_403 unless @repositories.all? { |repository| can_read_repository?(repository) }
end end
def check_view_permissions def check_view_permissions

3
config/initializers/extends/permission_extends.rb
View file

@ -239,9 +239,6 @@ module PermissionExtends
MyModulePermissions::STOCK_CONSUMPTION_UPDATE, MyModulePermissions::STOCK_CONSUMPTION_UPDATE,
RepositoryPermissions::READ, RepositoryPermissions::READ,
RepositoryPermissions::READ_ARCHIVED, RepositoryPermissions::READ_ARCHIVED,
RepositoryPermissions::COLUMNS_CREATE,
RepositoryPermissions::COLUMNS_UPDATE,
RepositoryPermissions::COLUMNS_DELETE,
RepositoryPermissions::ROWS_CREATE, RepositoryPermissions::ROWS_CREATE,
RepositoryPermissions::ROWS_UPDATE, RepositoryPermissions::ROWS_UPDATE,
RepositoryPermissions::ROWS_DELETE, RepositoryPermissions::ROWS_DELETE,

21
db/migrate/20250709082818_remove_repository_column_management_permissions_for_normal_user_role.rb Normal file
View file

@ -0,0 +1,21 @@
# frozen_string_literal: true
class RemoveRepositoryColumnManagementPermissionsForNormalUserRole < ActiveRecord::Migration[7.2]
REPOSITOY_COLUMN_MANAGE_PERMISSION = [
RepositoryPermissions::COLUMNS_CREATE,
RepositoryPermissions::COLUMNS_UPDATE,
RepositoryPermissions::COLUMNS_DELETE
].freeze
def up
@normal_user_role = UserRole.find_predefined_normal_user_role
@normal_user_role.permissions = @normal_user_role.permissions - REPOSITOY_COLUMN_MANAGE_PERMISSION
@normal_user_role.save(validate: false)
end
def down
@normal_user_role = UserRole.find_predefined_normal_user_role
@normal_user_role.permissions = @normal_user_role.permissions | REPOSITOY_COLUMN_MANAGE_PERMISSION
@normal_user_role.save(validate: false)
end
end