Even more permissions tweaks

This commit is contained in:
2025-02-17 16:55:43 +00:00
parent 1390e7b55b
commit cd7925c8b3

View File

@@ -744,15 +744,15 @@ class InvenioRDMStarterRecordPermissionPolicy(RDMRecordPermissionPolicy):
# Allow reading files of a draft
can_draft_read_files = can_preview + [SystemProcess()]
# Allow updating metadata of a draft
can_update_draft = can_review
can_update_draft = can_manage
# Allow uploading, updating and deleting files in drafts
can_draft_create_files = can_review
can_draft_create_files = can_manage
can_draft_set_content_files = can_manage + [SystemProcess()]
can_draft_get_content_files = can_manage + [SystemProcess()]
can_draft_commit_files = can_manage + [SystemProcess()]
can_draft_update_files = can_review
can_draft_delete_files = can_review
can_manage_record_access = can_review
can_draft_update_files = can_manage
can_draft_delete_files = can_manage
can_manage_record_access = can_manage
#
# PIDs
@@ -784,19 +784,19 @@ class InvenioRDMStarterRecordPermissionPolicy(RDMRecordPermissionPolicy):
can_add_community = can_review
# Media files
can_draft_media_create_files = [MediaFilesManager(), SystemProcess()]
can_draft_media_create_files = can_manage + [MediaFilesManager(), SystemProcess()]
can_draft_media_read_files = can_draft_media_create_files
can_draft_media_set_content_files = [SystemProcess()]
can_draft_media_commit_files = [SystemProcess()]
can_draft_media_set_content_files = can_manage + [SystemProcess()]
can_draft_media_commit_files = can_manage + [SystemProcess()]
can_draft_media_update_files = can_draft_media_create_files
can_draft_media_delete_files = can_draft_media_create_files
can_moderate = [SystemProcess()]
can_media_create_files = [SystemProcess()]
can_media_set_content_files = [SystemProcess()]
can_media_commit_files = [SystemProcess()]
can_media_update_files = [SystemProcess()]
can_media_delete_files = [SystemProcess()]
can_modify_locked_files = [SystemProcess()]
can_moderate = can_manage + [SystemProcess()]
can_media_create_files = can_manage + [SystemProcess()]
can_media_set_content_files = can_manage + [SystemProcess()]
can_media_commit_files = can_manage + [SystemProcess()]
can_media_update_files = can_manage + [SystemProcess()]
can_media_delete_files = can_manage + [SystemProcess()]
can_modify_locked_files = can_manage + [SystemProcess()]
class InvenioRDMStarterCommunityPermissionPolicy(CommunityPermissionPolicy):