apache/cloudstack
1
0
Fork 0
mirror of https://github.com/apache/cloudstack.git synced 2025-10-26 08:42:29 +01:00
Code Issues Packages Projects Releases Wiki Activity

updates roles read-only (#7080)

Browse Source
This commit is contained in:
Rodrigo D. Lopez 2023-01-13 02:16:48 -03:00 committed by GitHub
parent f9117df0b5
commit 3ea2f1dc9f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 32 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
engine/schema/src/main/resources/META-INF/db/schema-41720to41800.sql
View File

@ -998,6 +998,38 @@ BEGIN
CALL `cloud`.`IDEMPOTENT_ADD_KEY`('i_user_ip_address_state','user_ip_address', '(state)');
UPDATE `cloud`.`role_permissions`
SET sort_order = sort_order + 2
WHERE rule = '*'
AND permission = 'DENY'
AND role_id in (SELECT id FROM `cloud`.`roles` WHERE name = 'Read-Only Admin - Default');
INSERT INTO `cloud`.`role_permissions` (uuid, role_id, rule, permission, sort_order)
SELECT UUID(), role_id, 'quotaStatement', 'ALLOW', MAX(sort_order)-1
FROM `cloud`.`role_permissions` RP
WHERE role_id = (SELECT id FROM `cloud`.`roles` WHERE name = 'Read-Only Admin - Default');
INSERT INTO `cloud`.`role_permissions` (uuid, role_id, rule, permission, sort_order)
SELECT UUID(), role_id, 'quotaBalance', 'ALLOW', MAX(sort_order)-2
FROM `cloud`.`role_permissions` RP
WHERE role_id = (SELECT id FROM `cloud`.`roles` WHERE name = 'Read-Only Admin - Default');
UPDATE `cloud`.`role_permissions`
SET sort_order = sort_order + 2
WHERE rule = '*'
AND permission = 'DENY'
AND role_id in (SELECT id FROM `cloud`.`roles` WHERE name = 'Read-Only User - Default');
INSERT INTO `cloud`.`role_permissions` (uuid, role_id, rule, permission, sort_order)
SELECT UUID(), role_id, 'quotaStatement', 'ALLOW', MAX(sort_order)-1
FROM `cloud`.`role_permissions` RP
WHERE role_id = (SELECT id FROM `cloud`.`roles` WHERE name = 'Read-Only User - Default');
INSERT INTO `cloud`.`role_permissions` (uuid, role_id, rule, permission, sort_order)
SELECT UUID(), role_id, 'quotaBalance', 'ALLOW', MAX(sort_order)-2
FROM `cloud`.`role_permissions` RP
WHERE role_id = (SELECT id FROM `cloud`.`roles` WHERE name = 'Read-Only User - Default');
-- Add permission for domain admins to call isAccountAllowedToCreateOfferingsWithTags API
INSERT INTO `cloud`.`role_permissions` (`uuid`, `role_id`, `rule`, `permission`)