distgit/pagure: remove the commit ACL for API keys in prod

This ACL turns out to be too confusing to users as it currently
does not work with our OIDC set-up with fedpkg.
Once we'll have figured out how to make both work together or
keep one and remove the other, we can revisit.

Keeping this in staging so we have a place where we can experiment
with this.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
This commit is contained in:
Pierre-Yves Chibon 2021-02-18 09:24:18 +01:00
parent db2ea51618
commit d0a8837c07

View file

@ -233,7 +233,9 @@ ACLS = {
'commit_flag': 'Flag a commit', 'commit_flag': 'Flag a commit',
"update_watch_status": "Update the watch status on a project", "update_watch_status": "Update the watch status on a project",
"tag_project": "Allows adding git tags to a project", "tag_project": "Allows adding git tags to a project",
{% if env == 'staging' %}
"commit": "Commit to a git repository via http(s)", "commit": "Commit to a git repository via http(s)",
{% endif %}
} }
REQUIRED_GROUPS = { REQUIRED_GROUPS = {
@ -264,7 +266,9 @@ USER_ACLS = [
'pull_request_merge', 'pull_request_merge',
'modify_project', 'modify_project',
'update_watch_status', 'update_watch_status',
{% if env == 'staging' %}
'commit', 'commit',
{% endif %}
] ]
CROSS_PROJECT_ACLS = [ CROSS_PROJECT_ACLS = [
@ -275,7 +279,9 @@ CROSS_PROJECT_ACLS = [
'pull_request_merge', 'pull_request_merge',
'pull_request_flag', 'pull_request_flag',
'update_watch_status', 'update_watch_status',
{% if env == 'staging' %}
'commit', 'commit',
{% endif %}
] ]
ADMIN_API_ACLS = [ ADMIN_API_ACLS = [