permission_creator.rb in katello-3.17.0.rc2

- old
+ new

@@ -69,11 +69,12 @@
                                                       :available_puppet_module_names],
                    'katello/api/v2/content_view_filters' => [:index, :show, :auto_complete_search],
                    'katello/api/v2/content_view_filter_rules' => [:index, :show],
                    'katello/api/v2/content_view_histories' => [:index, :auto_complete_search],
                    'katello/api/v2/content_view_puppet_modules' => [:index, :show, :auto_complete_search],
-                   'katello/api/v2/content_view_versions' => [:index, :show, :auto_complete_search],
+                   'katello/api/v2/content_view_repositories' => [:show_all],
+                   'katello/api/v2/content_view_versions' => [:index, :show, :auto_complete_search, :export_histories],
                    'katello/api/v2/content_view_components' => [:index, :show],
                    'katello/api/v2/packages' => [:index],
                    'katello/api/v2/package_groups' => [:index, :show, :auto_complete_search, :compare],
                    'katello/api/v2/errata' => [:index, :show, :auto_complete_search, :compare, :available_errata],
                    'katello/api/v2/puppet_modules' => [:index, :show, :auto_complete_search, :compare],
@@ -291,51 +292,55 @@
                                                         :repo_puppet_modules,
                                                         :repo_compare_errata,
                                                         :repo_compare_packages,
                                                         :repo_compare_puppet_modules]
                          },
-                         :resource_type => 'Katello::Product'
+                         :resource_type => 'Katello::Product',
+                         :finder_scope => :readable
       @plugin.permission :create_products,
                          {
                            'katello/api/v2/products' => [:create],
-                           'katello/api/v2/repositories' => [:create],
                            'katello/api/v2/package_groups' => [:create]
                          },
                          :resource_type => 'Katello::Product'
       @plugin.permission :edit_products,
                          {
                            'katello/api/v2/products' => [:update],
-                           'katello/api/v2/repositories' => [:update, :remove_content, :import_uploads, :upload_content, :republish],
-                           'katello/api/v2/products_bulk_actions' => [:update_sync_plans, :update_http_proxy],
+                           'katello/api/v2/repositories' => [:create, :update, :remove_content, :import_uploads, :upload_content, :republish, :verify_checksum],
+                           'katello/api/v2/products_bulk_actions' => [:update_sync_plans, :update_http_proxy, :verify_checksum_products],
                            'katello/api/v2/content_uploads' => [:create, :update, :destroy],
                            'katello/api/v2/organizations' => [:repo_discover, :cancel_repo_discover]
                          },
-                         :resource_type => 'Katello::Product'
+                         :resource_type => 'Katello::Product',
+                         :finder_scope => :editable
       @plugin.permission :destroy_products,
                          {
                            'katello/api/v2/products' => [:destroy],
                            'katello/api/v2/repositories' => [:destroy],
                            'katello/api/v2/products_bulk_actions' => [:destroy_products],
                            'katello/api/v2/repositories_bulk_actions' => [:destroy_repositories],
                            'katello/api/v2/package_groups' => [:destroy]
                          },
-                         :resource_type => 'Katello::Product'
+                         :resource_type => 'Katello::Product',
+                         :finder_scope => :deletable
       @plugin.permission :sync_products,
                          {
                            'katello/api/v2/products' => [:sync],
                            'katello/api/v2/repositories' => [:sync],
                            'katello/api/v2/products_bulk_actions' => [:sync_products],
                            'katello/api/v2/repositories_bulk_actions' => [:sync_repositories],
                            'katello/api/v2/sync' => [:index],
                            'katello/api/v2/sync_plans' => [:sync],
                            'katello/sync_management' => [:index, :sync_status, :product_status, :sync, :destroy]
                          },
-                         :resource_type => 'Katello::Product'
+                         :resource_type => 'Katello::Product',
+                         :finder_scope => :syncable
       @plugin.permission :export_products,
                          {
                            'katello/api/v2/repositories' => [:export]
                          },
-                         :resource_type => 'Katello::Product'
+                         :resource_type => 'Katello::Product',
+                         :finder_scope => :exportable
     end
 
     def subscription_permissions # rubocop:disable Metrics/MethodLength
       @plugin.permission :view_subscriptions,
                          {