Resolve "Add permissions/rules" #22
No reviewers
Labels
No labels
Security
TeX
auto-update
board
done
board
ready
board
todo
check
delete-eslint-rc-js
check
update-builddeps-package-json
check
update-eslint-rc-js
check
update-gitignore
check
update-merge-request-template
check
update-prettier-ignore
check
update-pyproject-toml
check
update-renovate-json
check
update-tox-ini
part
backend
part
ci
part
docs
part
frontend
part
i18n
part
non-technical
part
packaging
prio
1
prio
2
prio
3
release-mr-5.x
size
large
size
medium
size
small
source
customer
source
customer::fsmw
source
customer::fss
source
customer::teckids
source
downstream
type
breaking
type
bug
type
feature
type
refactoring
workflow
blocked
workflow
confirmed
workflow
current-todo
workflow
discussing
workflow
new-app
workflow
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
aleksis/AlekSIS-App-Maka!22
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "9-add-permissions-rules"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Closes #9
assigned to @yuha
mentioned in merge request !20
added 1 commit
Compare with previous version
added 2 commits
Compare with previous version
added 3 commits
6f549d5e- Add basic permissions and rules70741b74- Rename create rule names in mutationse93567be- Add dynamically added permissionsCompare with previous version
added 1 commit
Compare with previous version
(kind of) needs https://edugit.org/AlekSIS/official/AlekSIS-Core/-/issues/1095 – otherwise non-admin group owners are not able to really manage grades
Nearly finished ;-)
added 4 commits
78d7c888- Add permission checks to queryset filtering in types3469334c- Remove global permission checks for unsensitive models2c34edf3- Actually allow for filtering grades & efforts by group ID as needed by group overview page9eca127e- Include subgroups in effort/grade query filteringCompare with previous version
good! :D
update: this should be usable now (finally)
TODO: respect perms in frontend (disable fields on read only permissions etc)
TODO: check for/discuss student perspective
resolved all threads
@hansegucker would be great if you could do some testing tomorrow!
Why is shared secret needed for managing grade sets and effort types
Use
super().get_queryset()as shared secret check won't work otherwise.Use
super().get_queryset()as shared secret check won't work otherwise.Use
super().get_queryset()as shared secret check won't work otherwise.This is probably wrong. With this check, a user would be able to see the grades of all the groups he is a member of. Instead include an or in the
queryset.filterat the end checking for the person attribute.and so on
Separate into fetch and view permission (AS EVERYWHERE ELSE).
This is
fetch_gradesets_ruleThis is
view_gradesets_ruleas above
as above
added 1 commit
01b96b63- Remove shared secret check from grade set and effort type types/mutations/pagesCompare with previous version
removed
changed this line in version 7 of the diff
changed this line in version 7 of the diff
added 1 commit
f88817ba- Apply 2 suggestion(s) to 1 file(s)Compare with previous version
changed this line in version 8 of the diff
changed this line in version 8 of the diff
changed this line in version 8 of the diff
changed this line in version 8 of the diff
changed this line in version 8 of the diff
changed this line in version 8 of the diff
added 1 commit
75681d41- Rename rulesCompare with previous version
added 1 commit
9ec6b33d- Fix get_queryset with shared secret mixinCompare with previous version
changed this line in version 10 of the diff
added 1 commit
39d0aa7c- Fix permission filtering for viewing own gradesCompare with previous version
changed this line in version 11 of the diff
changed this line in version 11 of the diff
changed this line in version 11 of the diff
changed this line in version 11 of the diff
added 1 commit
980c5cee- Separate fetch and view rulesCompare with previous version
resolved all threads
assigned to @hansegucker and unassigned @yuha
marked this merge request as ready
added 1 commit
b9a63416- ReformatCompare with previous version
mentioned in commit
a56a2fc6dd