distgit/pagure: remove the commit ACL for API keys in prod
This ACL turns out to be too confusing to users as it currently does not work with our OIDC set-up with fedpkg. Once we'll have figured out how to make both work together or keep one and remove the other, we can revisit. Keeping this in staging so we have a place where we can experiment with this. Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
This commit is contained in:
parent
db2ea51618
commit
d0a8837c07
1 changed files with 6 additions and 0 deletions
|
@ -233,7 +233,9 @@ ACLS = {
|
||||||
'commit_flag': 'Flag a commit',
|
'commit_flag': 'Flag a commit',
|
||||||
"update_watch_status": "Update the watch status on a project",
|
"update_watch_status": "Update the watch status on a project",
|
||||||
"tag_project": "Allows adding git tags to a project",
|
"tag_project": "Allows adding git tags to a project",
|
||||||
|
{% if env == 'staging' %}
|
||||||
"commit": "Commit to a git repository via http(s)",
|
"commit": "Commit to a git repository via http(s)",
|
||||||
|
{% endif %}
|
||||||
}
|
}
|
||||||
|
|
||||||
REQUIRED_GROUPS = {
|
REQUIRED_GROUPS = {
|
||||||
|
@ -264,7 +266,9 @@ USER_ACLS = [
|
||||||
'pull_request_merge',
|
'pull_request_merge',
|
||||||
'modify_project',
|
'modify_project',
|
||||||
'update_watch_status',
|
'update_watch_status',
|
||||||
|
{% if env == 'staging' %}
|
||||||
'commit',
|
'commit',
|
||||||
|
{% endif %}
|
||||||
]
|
]
|
||||||
|
|
||||||
CROSS_PROJECT_ACLS = [
|
CROSS_PROJECT_ACLS = [
|
||||||
|
@ -275,7 +279,9 @@ CROSS_PROJECT_ACLS = [
|
||||||
'pull_request_merge',
|
'pull_request_merge',
|
||||||
'pull_request_flag',
|
'pull_request_flag',
|
||||||
'update_watch_status',
|
'update_watch_status',
|
||||||
|
{% if env == 'staging' %}
|
||||||
'commit',
|
'commit',
|
||||||
|
{% endif %}
|
||||||
]
|
]
|
||||||
|
|
||||||
ADMIN_API_ACLS = [
|
ADMIN_API_ACLS = [
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue