From f5e24ec6ff6b776abca3d5f85cb4f5ae5e79ebb9 Mon Sep 17 00:00:00 2001 From: Evgeniy Alekseev Date: Mon, 21 Nov 2022 18:07:03 +0200 Subject: [PATCH] hide getting logs under reporter permission --- src/ahriman/web/views/status/logs.py | 2 +- tests/ahriman/web/views/status/test_views_status_logs.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/ahriman/web/views/status/logs.py b/src/ahriman/web/views/status/logs.py index af74315d..4dbcf9dc 100644 --- a/src/ahriman/web/views/status/logs.py +++ b/src/ahriman/web/views/status/logs.py @@ -38,7 +38,7 @@ class LogsView(BaseView): """ DELETE_PERMISSION = POST_PERMISSION = UserAccess.Full - GET_PERMISSION = HEAD_PERMISSION = UserAccess.Read + GET_PERMISSION = HEAD_PERMISSION = UserAccess.Reporter async def delete(self) -> None: """ diff --git a/tests/ahriman/web/views/status/test_views_status_logs.py b/tests/ahriman/web/views/status/test_views_status_logs.py index d5517983..fa8d8b1b 100644 --- a/tests/ahriman/web/views/status/test_views_status_logs.py +++ b/tests/ahriman/web/views/status/test_views_status_logs.py @@ -14,7 +14,7 @@ async def test_get_permission() -> None: """ for method in ("GET", "HEAD"): request = pytest.helpers.request("", "", method) - assert await LogsView.get_permission(request) == UserAccess.Read + assert await LogsView.get_permission(request) == UserAccess.Reporter for method in ("DELETE", "POST"): request = pytest.helpers.request("", "", method) assert await LogsView.get_permission(request) == UserAccess.Full