#2275 hub: default policy allow packagelist changes with 'tag' permission
Merged 2 years ago by tkopecek. Opened 2 years ago by tkopecek.
tkopecek/koji issue2011  into  master

@@ -19,8 +19,11 @@ 

  * tag/untag/move operations are governed by tag locks/permissions

  * builds from srpm are only allowed for admins

  * builds from expired repos are only allowed for admins

- * only admins may modify package lists

+ * only admins and users with ``tag`` permission may modify package lists

  * tasks go to the default channel

+ * vm tasks need ``admin`` or ``win-admin`` permission

+ * content generator import can be done by anyone

+ * all content ends in ``DEFAULT`` volume.

  

  Configuration

  =============

file modified
+1
@@ -530,6 +530,7 @@ 

              ''',

      'package_list': '''

              has_perm admin :: allow

+             has_perm tag :: allow

              all :: deny

              ''',

      'channel': '''

Metadata Update from @tkopecek:
- Pull-request tagged with: testing-ready

2 years ago

Metadata Update from @jcupova:
- Pull-request tagged with: testing-done

2 years ago

Commit 2437d0c fixes this pull-request

Pull-Request has been merged by tkopecek

2 years ago