Adjust access policies for labels

fixes #3243
pulp · Sep 6, 2023 · 1940bb0 · 1940bb0
1 parent 748b3dd
commit 1940bb0
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 4 deletions.
diff --git a/CHANGES/3243.feature b/CHANGES/3243.feature
@@ -0,0 +1 @@
+Adjusted default access policies for new labels api.
diff --git a/pulp_rpm/app/viewsets/repository.py b/pulp_rpm/app/viewsets/repository.py
@@ -77,7 +77,7 @@ class RpmRepositoryViewSet(RepositoryViewSet, ModifyRepositoryActionMixin, Roles
                 ],
             },
             {
-                "action": ["update", "partial_update"],
+                "action": ["update", "partial_update", "set_label", "unset_label"],
                 "principal": "authenticated",
                 "effect": "allow",
                 "condition": [
@@ -325,7 +325,7 @@ class RpmRemoteViewSet(RemoteViewSet, RolesMixin):
                 "condition": "has_model_or_domain_perms:rpm.add_rpmremote",
             },
             {
-                "action": ["update", "partial_update"],
+                "action": ["update", "partial_update", "set_label", "unset_label"],
                 "principal": "authenticated",
                 "effect": "allow",
                 "condition": [
@@ -404,7 +404,7 @@ class UlnRemoteViewSet(RemoteViewSet, RolesMixin):
                 "condition": "has_model_or_domain_perms:rpm.add_ulnremote",
             },
             {
-                "action": ["update", "partial_update"],
+                "action": ["update", "partial_update", "set_label", "unset_label"],
                 "principal": "authenticated",
                 "effect": "allow",
                 "condition": [
@@ -613,7 +613,7 @@ class RpmDistributionViewSet(DistributionViewSet, RolesMixin):
                 ],
             },
             {
-                "action": ["update", "partial_update"],
+                "action": ["update", "partial_update", "set_label", "unset_label"],
                 "principal": "authenticated",
                 "effect": "allow",
                 "condition": [