ebaf3a0817
The catalog reads like the Winter registerPermissions() list, and a test pins the codes and their default roles.
47 lines
1.5 KiB
Go
47 lines
1.5 KiB
Go
package user
|
|
|
|
import "git.golem15.com/golem15/summercms/modules/pact"
|
|
|
|
const userPermissionTab = "golem15.user::lang.plugin.tab"
|
|
|
|
// Permissions is the plugin's Winter registerPermissions() catalog plus one
|
|
// code of its own. The four PHP codes default to the developer role;
|
|
// impersonate_user is registered so imported backend roles that name it stay
|
|
// valid, although no screen uses it. The fifth code
|
|
// (classes.PermissionManagePrivilegedGroups) has no default role: only a
|
|
// superuser, or a role that was granted it explicitly, may change the email
|
|
// or password of a privileged-group member or delete one.
|
|
func (*Plugin) Permissions() []pact.Permission {
|
|
return []pact.Permission{
|
|
{
|
|
Code: "golem15.users.access_users",
|
|
Tab: userPermissionTab,
|
|
Label: "golem15.user::lang.plugin.access_users",
|
|
Roles: []string{"developer"},
|
|
},
|
|
{
|
|
Code: "golem15.users.access_groups",
|
|
Tab: userPermissionTab,
|
|
Label: "golem15.user::lang.plugin.access_groups",
|
|
Roles: []string{"developer"},
|
|
},
|
|
{
|
|
Code: "golem15.users.access_settings",
|
|
Tab: userPermissionTab,
|
|
Label: "golem15.user::lang.plugin.access_settings",
|
|
Roles: []string{"developer"},
|
|
},
|
|
{
|
|
Code: "golem15.users.impersonate_user",
|
|
Tab: userPermissionTab,
|
|
Label: "golem15.user::lang.plugin.impersonate_user",
|
|
Roles: []string{"developer"},
|
|
},
|
|
{
|
|
Code: "golem15.users.manage_privileged_groups",
|
|
Tab: userPermissionTab,
|
|
Label: "golem15.user::lang.plugin.manage_privileged_groups",
|
|
},
|
|
}
|
|
}
|