Adjust access policies for labels (#1569)

fixes #1568
pulp · Sep 8, 2023 · 567b0c7 · 567b0c7
1 parent 71e32c9
commit 567b0c7
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 5 deletions.
diff --git a/CHANGES/1568.feature b/CHANGES/1568.feature
@@ -0,0 +1 @@
+Adjusted default access policies for new labels api.
diff --git a/pulp_ansible/app/viewsets.py b/pulp_ansible/app/viewsets.py
@@ -448,7 +448,7 @@ class RoleRemoteViewSet(RemoteViewSet, RolesMixin):
                 "condition": "has_model_or_obj_perms:ansible.delete_roleremote",
             },
             {
-                "action": ["update", "partial_update"],
+                "action": ["update", "partial_update", "set_label", "unset_label"],
                 "principal": "authenticated",
                 "effect": "allow",
                 "condition": "has_model_or_obj_perms:ansible.change_roleremote",
@@ -513,7 +513,7 @@ class GitRemoteViewSet(RemoteViewSet, RolesMixin):
                 "condition": "has_model_or_obj_perms:ansible.delete_gitremote",
             },
             {
-                "action": ["update", "partial_update"],
+                "action": ["update", "partial_update", "set_label", "unset_label"],
                 "principal": "authenticated",
                 "effect": "allow",
                 "condition": "has_model_or_obj_perms:ansible.change_gitremote",
@@ -585,7 +585,7 @@ def get_queryset(self):
                 "condition": "has_model_or_obj_perms:ansible.delete_ansiblerepository",
             },
             {
-                "action": ["update", "partial_update"],
+                "action": ["update", "partial_update", "set_label", "unset_label"],
                 "principal": "authenticated",
                 "effect": "allow",
                 "condition": [
@@ -1026,7 +1026,7 @@ def get_queryset(self):
                 "condition": "has_model_or_obj_perms:ansible.delete_collectionremote",
             },
             {
-                "action": ["update", "partial_update"],
+                "action": ["update", "partial_update", "set_label", "unset_label"],
                 "principal": "authenticated",
                 "effect": "allow",
                 "condition": "has_model_or_obj_perms:ansible.change_collectionremote",
@@ -1152,7 +1152,7 @@ class AnsibleDistributionViewSet(DistributionViewSet, RolesMixin):
                 ],
             },
             {
-                "action": ["update", "partial_update"],
+                "action": ["update", "partial_update", "set_label", "unset_label"],
                 "principal": "authenticated",
                 "effect": "allow",
                 "condition": [