From cd7925c8b32e819e92737aae7baa9b02e2de5a8b Mon Sep 17 00:00:00 2001 From: Cian Hughes Date: Mon, 17 Feb 2025 16:55:43 +0000 Subject: [PATCH] Even more permissions tweaks --- invenio.cfg | 30 +++++++++++++++--------------- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/invenio.cfg b/invenio.cfg index 9e6b1a3..06ae35b 100644 --- a/invenio.cfg +++ b/invenio.cfg @@ -744,15 +744,15 @@ class InvenioRDMStarterRecordPermissionPolicy(RDMRecordPermissionPolicy): # Allow reading files of a draft can_draft_read_files = can_preview + [SystemProcess()] # Allow updating metadata of a draft - can_update_draft = can_review + can_update_draft = can_manage # Allow uploading, updating and deleting files in drafts - can_draft_create_files = can_review + can_draft_create_files = can_manage can_draft_set_content_files = can_manage + [SystemProcess()] can_draft_get_content_files = can_manage + [SystemProcess()] can_draft_commit_files = can_manage + [SystemProcess()] - can_draft_update_files = can_review - can_draft_delete_files = can_review - can_manage_record_access = can_review + can_draft_update_files = can_manage + can_draft_delete_files = can_manage + can_manage_record_access = can_manage # # PIDs @@ -784,19 +784,19 @@ class InvenioRDMStarterRecordPermissionPolicy(RDMRecordPermissionPolicy): can_add_community = can_review # Media files - can_draft_media_create_files = [MediaFilesManager(), SystemProcess()] + can_draft_media_create_files = can_manage + [MediaFilesManager(), SystemProcess()] can_draft_media_read_files = can_draft_media_create_files - can_draft_media_set_content_files = [SystemProcess()] - can_draft_media_commit_files = [SystemProcess()] + can_draft_media_set_content_files = can_manage + [SystemProcess()] + can_draft_media_commit_files = can_manage + [SystemProcess()] can_draft_media_update_files = can_draft_media_create_files can_draft_media_delete_files = can_draft_media_create_files - can_moderate = [SystemProcess()] - can_media_create_files = [SystemProcess()] - can_media_set_content_files = [SystemProcess()] - can_media_commit_files = [SystemProcess()] - can_media_update_files = [SystemProcess()] - can_media_delete_files = [SystemProcess()] - can_modify_locked_files = [SystemProcess()] + can_moderate = can_manage + [SystemProcess()] + can_media_create_files = can_manage + [SystemProcess()] + can_media_set_content_files = can_manage + [SystemProcess()] + can_media_commit_files = can_manage + [SystemProcess()] + can_media_update_files = can_manage + [SystemProcess()] + can_media_delete_files = can_manage + [SystemProcess()] + can_modify_locked_files = can_manage + [SystemProcess()] class InvenioRDMStarterCommunityPermissionPolicy(CommunityPermissionPolicy):