Skip to content

Commit

Permalink
fixed permissions for configured addons (#163)
Browse files Browse the repository at this point in the history
# Fixed Permisssion Model for Configured Addons
From now on:
- user may connect addon if they have at least READ+WRITE permission.
- user may edit addon if they have connected this addon or they have ADMIN access.
  • Loading branch information
opaduchak authored Nov 22, 2024
1 parent 51d195f commit e9af0f7
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion addon_service/common/permissions.py
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,7 @@ def has_object_permission(self, request, view, obj):
and osf.has_osf_permission_on_resource(
request,
obj.resource_uri,
osf.OSFPermission.ADMIN,
osf.OSFPermission.WRITE,
)
)

Expand Down

0 comments on commit e9af0f7

Please sign in to comment.