Fixes #36663 - Add permission to modify LookupValue resource

This is necessary when using gql to allow non-admin users to modify lookup-key values.
theforeman · Aug 9, 2023 · 5ffba37 · 5ffba37
1 parent 17ae808
commit 5ffba37
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/app/registries/foreman/access_permissions.rb b/app/registries/foreman/access_permissions.rb
@@ -314,6 +314,7 @@
                                       :"api/v2/common_parameters" => [:destroy],
                                       :"api/v2/parameters" => [:destroy, :reset],
                                   }
+    map.permission :create_lookup_values, { :lookup_values => [:index] }
   end
 
   permission_set.security_block :images do |map|

diff --git a/db/seeds.d/020-permissions_list.rb b/db/seeds.d/020-permissions_list.rb
@@ -99,6 +99,7 @@ def permissions
         ['Parameter', 'create_params'],
         ['Parameter', 'edit_params'],
         ['Parameter', 'destroy_params'],
+        ['LookupValue', 'create_lookup_values'],
         ['PersonalAccessToken', 'view_personal_access_tokens'],
         ['PersonalAccessToken', 'create_personal_access_tokens'],
         ['PersonalAccessToken', 'revoke_personal_access_tokens'],