Add locked roles galaxy.group_admin, galaxy.user_admin and updated ga…

…laxy.synclist_owner Issue: AAH-1093
ansible · Mar 18, 2022 · 9c0df23 · 9c0df23
1 parent c3f67b0
commit 9c0df23
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 1 deletion.
diff --git a/galaxy_ng/app/access_control/statements/roles.py b/galaxy_ng/app/access_control/statements/roles.py
@@ -36,6 +36,18 @@
                 "galaxy.upload_to_namespace",
                 "ansible.delete_collection",
             ],
+            "galaxy.group_admin": [
+                "galaxy.view_group",
+                "galaxy.delete_group",
+                "galaxy.add_group",
+                "galaxy.change_group",
+            ],
+            "galaxy.user_admin": [
+                "galaxy.view_user",
+                "galaxy.delete_user",
+                "galaxy.add_user",
+                "galaxy.change_user",
+            ],
         },
     },
     "SyncListViewSet": {
@@ -45,6 +57,7 @@
                 "galaxy.change_synclist",
                 "galaxy.delete_synclist",
                 "galaxy.view_synclist",
+                "ansible.change_collectionremote",
             ],
         }
     },

diff --git a/galaxy_ng/tests/integration/api/test_locked_roles.py b/galaxy_ng/tests/integration/api/test_locked_roles.py
@@ -13,7 +13,8 @@ def test_locked_roles_exist(ansible_config):
     galaxy_locked_roles = [
         "galaxy.collection_admin",
         "galaxy.execution_environment_admin",
-        "galaxy.namespace_owner",
+        "galaxy.group_admin",
+        "galaxy.user_admin",
         "galaxy.publisher",
         "galaxy.synclist_owner",
     ]