Permit ProjectDeveloper to view released files

People assigned the ProjectDeveloper role have permission to view unreleased files, they therefore have permission to view the less-sensitive released files This change removes the need to assign both of these roles to researchers working on a project.
opensafely-core · Oct 10, 2024 · d70a22f · d70a22f
1 parent ec6f17a
commit d70a22f
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/jobserver/authorization/roles.py b/jobserver/authorization/roles.py
@@ -102,6 +102,7 @@ class ProjectDeveloper:
         job_cancel,
         job_run,
         project_manage,
+        release_file_view,
         snapshot_create,
         unreleased_outputs_view,
         workspace_archive,

diff --git a/tests/unit/jobserver/api/test_jobs.py b/tests/unit/jobserver/api/test_jobs.py
@@ -908,6 +908,7 @@ def test_userapidetail_success(api_rf, project_membership):
                 "job_cancel",
                 "job_run",
                 "project_manage",
+                "release_file_view",
                 "snapshot_create",
                 "unreleased_outputs_view",
                 "workspace_archive",