rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix document permission

Browse Source 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
This commit is contained in:
Sacha Al Himdani
2025-11-14 16:32:58 +01:00
parent 80bbfca1f7
commit 44cf6737b5
2 changed files with 13 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
pkg/authz/permissions.go
View File

@@ -527,13 +527,18 @@ var Permissions = map[uint16]map[Action][]Role{
ActionCancelSignatureRequest: EditRoles,
},
coredata.DocumentVersionEntityType: {
ActionGet: AllRoles,
ActionGetFile: AllRoles,
ActionGetOwner: AllRoles,
ActionDocument: AllRoles,
ActionSignatures: AllRoles,
ActionGet: AllRoles,
ActionGetFile: AllRoles,
ActionGetOwner: AllRoles,
ActionDocument: AllRoles,
ActionSignatures: AllRoles,
ActionExportDocumentVersionPDF: AllRoles,
ActionUpdateDocumentVersion: EditRoles,
ActionUpdateDocumentVersion: EditRoles,
ActionRequestSignature: EditRoles,
ActionBulkRequestSignatures: EditRoles,
ActionSendSigningNotifications: EditRoles,
ActionCancelSignatureRequest: EditRoles,
},
coredata.DocumentVersionSignatureEntityType: {
ActionGet: AllRoles,

3
pkg/authz/service.go
View File

@@ -847,8 +847,9 @@ func (s *TenantAuthzService) Authorize(
) error {
requiredRoles := GetPermissionsForAction(entityGID.EntityType(), action)
if requiredRoles == nil {
entityModel, _ := coredata.EntityModel(entityGID.EntityType())
return &PermissionDeniedError{
Message: fmt.Sprintf("no permissions defined for action %s on entity type %d", action, entityGID.EntityType()),
Message: fmt.Sprintf("no permissions defined for action %s on entity %s", action, entityModel),
}
}