Even more permissions tweaks

This commit is contained in:
2025-02-17 16:55:43 +00:00
parent 1390e7b55b
commit cd7925c8b3

View File

@@ -744,15 +744,15 @@ class InvenioRDMStarterRecordPermissionPolicy(RDMRecordPermissionPolicy):
# Allow reading files of a draft # Allow reading files of a draft
can_draft_read_files = can_preview + [SystemProcess()] can_draft_read_files = can_preview + [SystemProcess()]
# Allow updating metadata of a draft # Allow updating metadata of a draft
can_update_draft = can_review can_update_draft = can_manage
# Allow uploading, updating and deleting files in drafts # Allow uploading, updating and deleting files in drafts
can_draft_create_files = can_review can_draft_create_files = can_manage
can_draft_set_content_files = can_manage + [SystemProcess()] can_draft_set_content_files = can_manage + [SystemProcess()]
can_draft_get_content_files = can_manage + [SystemProcess()] can_draft_get_content_files = can_manage + [SystemProcess()]
can_draft_commit_files = can_manage + [SystemProcess()] can_draft_commit_files = can_manage + [SystemProcess()]
can_draft_update_files = can_review can_draft_update_files = can_manage
can_draft_delete_files = can_review can_draft_delete_files = can_manage
can_manage_record_access = can_review can_manage_record_access = can_manage
# #
# PIDs # PIDs
@@ -784,19 +784,19 @@ class InvenioRDMStarterRecordPermissionPolicy(RDMRecordPermissionPolicy):
can_add_community = can_review can_add_community = can_review
# Media files # Media files
can_draft_media_create_files = [MediaFilesManager(), SystemProcess()] can_draft_media_create_files = can_manage + [MediaFilesManager(), SystemProcess()]
can_draft_media_read_files = can_draft_media_create_files can_draft_media_read_files = can_draft_media_create_files
can_draft_media_set_content_files = [SystemProcess()] can_draft_media_set_content_files = can_manage + [SystemProcess()]
can_draft_media_commit_files = [SystemProcess()] can_draft_media_commit_files = can_manage + [SystemProcess()]
can_draft_media_update_files = can_draft_media_create_files can_draft_media_update_files = can_draft_media_create_files
can_draft_media_delete_files = can_draft_media_create_files can_draft_media_delete_files = can_draft_media_create_files
can_moderate = [SystemProcess()] can_moderate = can_manage + [SystemProcess()]
can_media_create_files = [SystemProcess()] can_media_create_files = can_manage + [SystemProcess()]
can_media_set_content_files = [SystemProcess()] can_media_set_content_files = can_manage + [SystemProcess()]
can_media_commit_files = [SystemProcess()] can_media_commit_files = can_manage + [SystemProcess()]
can_media_update_files = [SystemProcess()] can_media_update_files = can_manage + [SystemProcess()]
can_media_delete_files = [SystemProcess()] can_media_delete_files = can_manage + [SystemProcess()]
can_modify_locked_files = [SystemProcess()] can_modify_locked_files = can_manage + [SystemProcess()]
class InvenioRDMStarterCommunityPermissionPolicy(CommunityPermissionPolicy): class InvenioRDMStarterCommunityPermissionPolicy(CommunityPermissionPolicy):