Adjust access policies for labels

fixes #1384
pulp · Sep 8, 2023 · 1af24ff · 1af24ff
1 parent abdcf7c
commit 1af24ff
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 4 deletions.
diff --git a/CHANGES/1384.feature b/CHANGES/1384.feature
@@ -0,0 +1 @@
+Adjusted default access policies for new labels API.
diff --git a/pulp_container/app/viewsets.py b/pulp_container/app/viewsets.py
@@ -381,7 +381,7 @@ class ContainerRemoteViewSet(RemoteViewSet, RolesMixin):
                 "condition": "has_model_or_obj_perms:container.view_containerremote",
             },
             {
-                "action": ["update", "partial_update"],
+                "action": ["update", "partial_update", "set_label", "unset_label"],
                 "principal": "authenticated",
                 "effect": "allow",
                 "condition": [
@@ -579,7 +579,7 @@ class ContainerRepositoryViewSet(
                 ],
             },
             {
-                "action": ["update", "partial_update"],
+                "action": ["update", "partial_update", "set_label", "unset_label"],
                 "principal": "authenticated",
                 "effect": "allow",
                 "condition": [
@@ -968,7 +968,7 @@ class ContainerPushRepositoryViewSet(
                 ],
             },
             {
-                "action": ["update", "partial_update"],
+                "action": ["update", "partial_update", "set_label", "unset_label"],
                 "principal": "authenticated",
                 "effect": "allow",
                 "condition_expression": [
@@ -1172,7 +1172,7 @@ class ContainerDistributionViewSet(DistributionViewSet, RolesMixin):
                 ],
             },
             {
-                "action": ["update", "partial_update"],
+                "action": ["update", "partial_update", "set_label", "unset_label"],
                 "principal": "authenticated",
                 "effect": "allow",
                 "condition": [
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		Adjusted default access policies for new labels API.