Only use the necessary HTTP methods for default permissions

This commit is contained in:
Jeremy Grossmann 2021-08-17 23:47:32 +09:30 committed by GitHub
parent 4c6135fe88
commit 1a5fb1abcc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -53,19 +53,19 @@ def create_default_roles(target, connection, **kw):
default_permissions = [
{
"description": "Allow access to all endpoints",
"methods": ["GET", "HEAD", "POST", "PUT", "DELETE", "PATCH"],
"methods": ["GET", "POST", "PUT", "DELETE"],
"path": "/",
"action": "ALLOW"
},
{
"description": "Allow to create and list projects",
"methods": ["GET", "HEAD", "POST"],
"methods": ["GET", "POST"],
"path": "/projects",
"action": "ALLOW"
},
{
"description": "Allow to create and list templates",
"methods": ["GET", "HEAD", "POST"],
"methods": ["GET", "POST"],
"path": "/templates",
"action": "ALLOW"
},
@ -77,7 +77,7 @@ def create_default_roles(target, connection, **kw):
},
{
"description": "Allow access to all symbol endpoints",
"methods": ["GET", "HEAD", "POST"],
"methods": ["GET", "POST"],
"path": "/symbols/*",
"action": "ALLOW"
},