Cleaning up unused perms and introducing manage perm set

folio-org · Dec 17, 2024 · abd73e6 · abd73e6
1 parent 4cea76b
commit abd73e6
Showing 1 changed file with 22 additions and 7 deletions.
diff --git a/package.json b/package.json
@@ -61,7 +61,8 @@
           "ui-authorization-roles.settings.create",
           "ui-authorization-roles.settings.view",
           "ui-authorization-roles.settings.edit",
-          "ui-authorization-roles.settings.delete"
+          "ui-authorization-roles.settings.delete",
+          "ui-authorization-roles.users.settings.manage"
         ],
         "visible": true
       },
@@ -73,7 +74,6 @@
           "settings.authorization-roles.enabled",
           "roles.item.get",
           "roles.collection.get",
-          "roles.users.item.get",
           "roles.users.collection.get",
           "role-capabilities.collection.get",
           "role-capability-sets.collection.get",
@@ -82,9 +82,13 @@
           "capability-sets.collection.get",
           "users.collection.get",
           "capabilities.item.get",
-          "roles.users.collection.get",
           "capability-sets.item.get",
-          "role.capability-sets.collection.get"
+          "role.capability-sets.collection.get",
+          "ui-authorization-roles.settings.view",
+          "roles.users.collection.get",
+          "roles.users.item.get",
+          "usergroups.collection.get",
+          "usergroups.item.get"
         ],
         "visible": true
       },
@@ -95,7 +99,6 @@
         "subPermissions": [
           "ui-authorization-roles.settings.view",
           "roles.item.delete",
-          "roles.users.item.delete",
           "role-capabilities.collection.delete",
           "role-capability-sets.collection.delete"
         ],
@@ -109,7 +112,6 @@
           "ui-authorization-roles.settings.view",
           "roles.item.post",
           "roles.collection.post",
-          "roles.users.item.post",
           "role-capabilities.collection.post",
           "role-capability-sets.collection.post"
         ],
@@ -122,11 +124,24 @@
         "subPermissions": [
           "ui-authorization-roles.settings.view",
           "roles.item.put",
-          "roles.users.item.put",
           "role-capabilities.collection.put",
           "role-capability-sets.collection.put"
         ],
         "visible": true
+      },
+      {
+        "permissionName": "ui-authorization-roles.users.settings.manage",
+        "displayName": "Settings (Authorization roles): Can manage user/role assignments",
+        "description": "",
+        "subPermissions": [
+          "ui-authorization-roles.users.settings.view",
+          "roles.users.item.post",
+          "roles.users.item.put",
+          "roles.users.item.delete",
+          "users-keycloak.auth-users.item.get",
+          "users-keycloak.auth-users.item.post"
+        ],
+        "visible": true
       }
     ]
   },