Only use the necessary HTTP methods for default permissions

This commit is contained in:
Jeremy Grossmann 2021-08-17 23:47:32 +09:30 committed by GitHub
parent 4c6135fe88
commit 1a5fb1abcc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -53,19 +53,19 @@ def create_default_roles(target, connection, **kw):
default_permissions = [ default_permissions = [
{ {
"description": "Allow access to all endpoints", "description": "Allow access to all endpoints",
"methods": ["GET", "HEAD", "POST", "PUT", "DELETE", "PATCH"], "methods": ["GET", "POST", "PUT", "DELETE"],
"path": "/", "path": "/",
"action": "ALLOW" "action": "ALLOW"
}, },
{ {
"description": "Allow to create and list projects", "description": "Allow to create and list projects",
"methods": ["GET", "HEAD", "POST"], "methods": ["GET", "POST"],
"path": "/projects", "path": "/projects",
"action": "ALLOW" "action": "ALLOW"
}, },
{ {
"description": "Allow to create and list templates", "description": "Allow to create and list templates",
"methods": ["GET", "HEAD", "POST"], "methods": ["GET", "POST"],
"path": "/templates", "path": "/templates",
"action": "ALLOW" "action": "ALLOW"
}, },
@ -77,7 +77,7 @@ def create_default_roles(target, connection, **kw):
}, },
{ {
"description": "Allow access to all symbol endpoints", "description": "Allow access to all symbol endpoints",
"methods": ["GET", "HEAD", "POST"], "methods": ["GET", "POST"],
"path": "/symbols/*", "path": "/symbols/*",
"action": "ALLOW" "action": "ALLOW"
}, },