mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-09-02 17:48:50 -04:00
Remove access_developer_docs permission, it doesn't make sense to need it.
Add view_activity permission when the permissions are being editted.
This commit is contained in:
@@ -30,7 +30,7 @@ from app.utils import user_has_permissions
|
||||
roles = {
|
||||
'send_messages': ['send_texts', 'send_emails', 'send_letters'],
|
||||
'manage_service': ['manage_users', 'manage_templates', 'manage_settings'],
|
||||
'manage_api_keys': ['manage_api_keys', 'access_developer_docs']
|
||||
'manage_api_keys': ['manage_api_keys']
|
||||
}
|
||||
|
||||
|
||||
@@ -98,7 +98,7 @@ def edit_user_permissions(service_id, user_id):
|
||||
user_id, service_id,
|
||||
permissions=set(chain.from_iterable(
|
||||
permissions for role, permissions in roles.items() if form[role].data
|
||||
))
|
||||
)) | {'view_activity'}
|
||||
)
|
||||
return redirect(url_for('.manage_users', service_id=service_id))
|
||||
|
||||
|
||||
@@ -198,7 +198,7 @@ def send_message_to_self(service_id, template_id):
|
||||
|
||||
@main.route("/services/<service_id>/send/<template_id>/from-api", methods=['GET'])
|
||||
@login_required
|
||||
@user_has_permissions('manage_api_keys', 'access_developer_docs')
|
||||
@user_has_permissions('manage_api_keys')
|
||||
def send_from_api(service_id, template_id):
|
||||
template = Template(
|
||||
templates_dao.get_service_template_or_404(service_id, template_id)['data']
|
||||
|
||||
Reference in New Issue
Block a user