Added AuthenticatedUser to allow list for can_create permission

This commit is contained in:
2025-02-17 13:47:44 +00:00
parent fb6df92fcf
commit 162aa90114

View File

@@ -59,6 +59,7 @@ from invenio_rdm_records.services.generators import (
)
from invenio_rdm_records.services.permissions import RDMRecordPermissionPolicy
from invenio_records_permissions.generators import (
AuthenticatedUser,
Disable,
IfConfig,
SystemProcess,
@@ -730,7 +731,7 @@ class InvenioRDMStarterRecordPermissionPolicy(RDMRecordPermissionPolicy):
# Used for search filtering of deleted records
# cannot be implemented inside can_read - otherwise permission will
# kick in before tombstone renders
can_create = [SystemProcess()]
can_create = [AuthenticatedUser(), SystemProcess()]
can_read_deleted = [SystemProcess()]
can_read_deleted_files = can_read_deleted
can_media_read_deleted_files = can_read_deleted_files