openapi: change mkeventd and bi Perm to OkayToIgnorePerm for non even…

…t_console and bi endpoints Change-Id: I129cb29e07e53c3489cd6d6d3ae5832739bcd1af
Checkmk · Oct 19, 2023 · 571162f · 571162f
1 parent 705cd53
commit 571162f
Show file tree

Hide file tree

Showing 9 changed files with 22 additions and 22 deletions.
diff --git a/cmk/gui/openapi/endpoints/acknowledgement/__init__.py b/cmk/gui/openapi/endpoints/acknowledgement/__init__.py
@@ -53,8 +53,8 @@
             permissions.AnyPerm(
                 [
                     permissions.Perm("general.see_all"),
-                    permissions.Perm("bi.see_all"),
-                    permissions.Perm("mkeventd.seeall"),
+                    permissions.OkayToIgnorePerm("bi.see_all"),
+                    permissions.OkayToIgnorePerm("mkeventd.seeall"),
                     permissions.Perm("wato.see_all_folders"),
                 ]
             )

diff --git a/cmk/gui/openapi/endpoints/activate_changes/__init__.py b/cmk/gui/openapi/endpoints/activate_changes/__init__.py
@@ -57,8 +57,8 @@
     permissions.AnyPerm(
         [
             permissions.Perm("general.see_all"),
-            permissions.Perm("bi.see_all"),
-            permissions.Perm("mkeventd.seeall"),
+            permissions.OkayToIgnorePerm("bi.see_all"),
+            permissions.OkayToIgnorePerm("mkeventd.seeall"),
         ]
     ),
 )

diff --git a/cmk/gui/openapi/endpoints/bi/__init__.py b/cmk/gui/openapi/endpoints/bi/__init__.py
@@ -92,7 +92,7 @@ class BIRuleEndpointSchema(BIRuleSchema):
                 [
                     permissions.Perm("bi.see_all"),
                     permissions.Perm("general.see_all"),
-                    permissions.Perm("mkeventd.seeall"),
+                    permissions.OkayToIgnorePerm("mkeventd.seeall"),
                 ]
             )
         ),

diff --git a/cmk/gui/openapi/endpoints/comment/__init__.py b/cmk/gui/openapi/endpoints/comment/__init__.py
@@ -58,8 +58,8 @@
     permissions.AnyPerm(
         [
             permissions.Perm("general.see_all"),
-            permissions.Perm("bi.see_all"),
-            permissions.Perm("mkeventd.seeall"),
+            permissions.OkayToIgnorePerm("bi.see_all"),
+            permissions.OkayToIgnorePerm("mkeventd.seeall"),
             permissions.Undocumented(permissions.Perm("wato.see_all_folders")),
         ]
     )

diff --git a/cmk/gui/openapi/endpoints/downtime/__init__.py b/cmk/gui/openapi/endpoints/downtime/__init__.py
@@ -99,8 +99,8 @@
     permissions.AnyPerm(
         [
             permissions.Perm("general.see_all"),
-            permissions.Perm("bi.see_all"),
-            permissions.Perm("mkeventd.seeall"),
+            permissions.OkayToIgnorePerm("bi.see_all"),
+            permissions.OkayToIgnorePerm("mkeventd.seeall"),
             permissions.Perm("wato.see_all_folders"),
         ]
     )

diff --git a/cmk/gui/openapi/endpoints/event_console/__init__.py b/cmk/gui/openapi/endpoints/event_console/__init__.py
@@ -67,7 +67,7 @@
         [
             permissions.Perm("mkeventd.seeall"),
             permissions.Perm("general.see_all"),
-            permissions.Perm("bi.see_all"),
+            permissions.OkayToIgnorePerm("bi.see_all"),
         ]
     )
 )

diff --git a/cmk/gui/openapi/endpoints/host/__init__.py b/cmk/gui/openapi/endpoints/host/__init__.py
@@ -89,8 +89,8 @@ class SingleHostParameters(BaseSchema):
     permissions.AnyPerm(
         [
             permissions.Perm("general.see_all"),
-            permissions.Perm("bi.see_all"),
-            permissions.Perm("mkeventd.seeall"),
+            permissions.OkayToIgnorePerm("bi.see_all"),
+            permissions.OkayToIgnorePerm("mkeventd.seeall"),
         ]
     )
 )

diff --git a/cmk/gui/openapi/endpoints/host_config/__init__.py b/cmk/gui/openapi/endpoints/host_config/__init__.py
@@ -122,9 +122,9 @@
         permissions.Undocumented(
             permissions.AnyPerm(
                 [
-                    permissions.Perm("bi.see_all"),
+                    permissions.OkayToIgnorePerm("bi.see_all"),
                     permissions.Perm("general.see_all"),
-                    permissions.Perm("mkeventd.seeall"),
+                    permissions.OkayToIgnorePerm("mkeventd.seeall"),
                 ]
             )
         ),
@@ -139,9 +139,9 @@
         permissions.Undocumented(
             permissions.AnyPerm(
                 [
-                    permissions.Perm("bi.see_all"),
+                    permissions.OkayToIgnorePerm("bi.see_all"),
                     permissions.Perm("general.see_all"),
-                    permissions.Perm("mkeventd.seeall"),
+                    permissions.OkayToIgnorePerm("mkeventd.seeall"),
                 ]
             )
         ),
@@ -156,9 +156,9 @@
         permissions.Undocumented(
             permissions.AnyPerm(
                 [
-                    permissions.Perm("bi.see_all"),
+                    permissions.OkayToIgnorePerm("bi.see_all"),
                     permissions.Perm("general.see_all"),
-                    permissions.Perm("mkeventd.seeall"),
+                    permissions.OkayToIgnorePerm("mkeventd.seeall"),
                     # only used to check if user can see a host
                     permissions.Perm("wato.see_all_folders"),
                 ]
@@ -177,9 +177,9 @@ def with_access_check_permission(perm: permissions.BasePerm) -> permissions.Base
             permissions.Undocumented(
                 permissions.AnyPerm(
                     [
-                        permissions.Perm("bi.see_all"),
+                        permissions.OkayToIgnorePerm("bi.see_all"),
                         permissions.Perm("general.see_all"),
-                        permissions.Perm("mkeventd.seeall"),
+                        permissions.OkayToIgnorePerm("mkeventd.seeall"),
                         # is only used to check if a user can see a host
                         permissions.Perm("wato.see_all_folders"),
                     ],

diff --git a/cmk/gui/openapi/endpoints/service/__init__.py b/cmk/gui/openapi/endpoints/service/__init__.py
@@ -41,8 +41,8 @@
     permissions.AnyPerm(
         [
             permissions.Perm("general.see_all"),
-            permissions.Perm("bi.see_all"),
-            permissions.Perm("mkeventd.seeall"),
+            permissions.OkayToIgnorePerm("bi.see_all"),
+            permissions.OkayToIgnorePerm("mkeventd.seeall"),
             permissions.Perm("wato.see_all_folders"),
         ]
     )