Răsfoiți Sursa

fix user role migration

abhishek9686 1 an în urmă
părinte
comite
d617f19cf2
2 a modificat fișierele cu 5 adăugiri și 4 ștergeri
  1. 1 0
      logic/user_mgmt.go
  2. 4 4
      migrate/migrate.go

+ 1 - 0
logic/user_mgmt.go

@@ -62,6 +62,7 @@ var NetworkUserPermissionTemplate = models.UserRolePermissionTemplate{
 				Update:    true,
 				Delete:    true,
 				VPNaccess: true,
+				SelfOnly:  true,
 			},
 		},
 	},

+ 4 - 4
migrate/migrate.go

@@ -323,13 +323,13 @@ func syncUsers() {
 					h, err := logic.GetHost(networkNodeI.HostID.String())
 					if err == nil {
 						logic.CreateRole(models.UserRolePermissionTemplate{
-							ID:                  models.UserRole(fmt.Sprintf("net-%s-user-gw-%s", netI.NetID, h.Name)),
-							DenyDashboardAccess: true,
-							NetworkID:           netI.NetID,
+							ID:        models.UserRole(fmt.Sprintf("net-%s-rag-%s", netI.NetID, h.Name)),
+							NetworkID: netI.NetID,
 							NetworkLevelAccess: map[models.RsrcType]map[models.RsrcID]models.RsrcPermissionScope{
 								models.RemoteAccessGwRsrc: {
 									models.RsrcID(networkNodeI.ID.String()): models.RsrcPermissionScope{
 										VPNaccess: true,
+										SelfOnly:  true,
 									},
 								},
 							},
@@ -374,7 +374,7 @@ func syncUsers() {
 					if err != nil {
 						continue
 					}
-					r, err := logic.GetRole(models.UserRole(fmt.Sprintf("net-%s-user-gw-%s", gwNode.Network, h.Name)))
+					r, err := logic.GetRole(models.UserRole(fmt.Sprintf("net-%s-rag-%s", gwNode.Network, h.Name)))
 					if err != nil {
 						continue
 					}