Skip to content

Commit 96273b6

Browse files
Split access levels on resource roles
1 parent c76eb6d commit 96273b6

8 files changed

+226
-189
lines changed

docs/swagger.yaml

+8-5
Original file line numberDiff line numberDiff line change
@@ -6,9 +6,9 @@ info:
66
77
88
GET/POST/DELETE `/Resources` endpoints can only be called from admins, via
9-
M2M, or users for whom there is at least one existing `Resource` where both
10-
`role.fullAccess` and `role.isActive` are `true`. Special Case: User can
11-
create/delte selfObtainable resource for its own.
9+
M2M, or users for whom there is at least one existing `Resource` where
10+
`role.fullReadAccess`, `role.fullWriteAccess` and `role.isActive` are `true`.
11+
Special Case: User can create/delte selfObtainable resource for its own.
1212
1313
`Resource Roles` POST and PUT endpoints can only be called from admins or
1414
via M2M.
@@ -481,7 +481,8 @@ definitions:
481481
type: object
482482
required:
483483
- name
484-
- fullAccess
484+
- fullReadccess
485+
- fullWriteAccess
485486
- isActive
486487
- selfObtainable
487488
properties:
@@ -492,7 +493,9 @@ definitions:
492493
name:
493494
type: string
494495
description: 'Unique resource role name, case in-sensitive'
495-
fullAccess:
496+
fullReadAccess:
497+
type: boolean
498+
fullWriteAccess:
496499
type: boolean
497500
isActive:
498501
type: boolean

0 commit comments

Comments
 (0)