03d5dad867
* add `InitialPermissions` model to RBAC This is a powerful construct between Permission and Role to set initial permissions for newly created objects. * use safer `request.user` * fixup! use safer `request.user` * force all self-defined serializers to descend from our custom one See https://github.com/goauthentik/authentik/pull/10139 * reorganize initial permission assignment * fixup! reorganize initial permission assignment
40 lines
1.3 KiB
Python
40 lines
1.3 KiB
Python
# Generated by Django 5.0.13 on 2025-04-07 13:05
|
|
|
|
import django.db.models.deletion
|
|
from django.db import migrations, models
|
|
|
|
|
|
class Migration(migrations.Migration):
|
|
|
|
dependencies = [
|
|
("auth", "0012_alter_user_first_name_max_length"),
|
|
("authentik_rbac", "0004_alter_systempermission_options"),
|
|
]
|
|
|
|
operations = [
|
|
migrations.CreateModel(
|
|
name="InitialPermissions",
|
|
fields=[
|
|
(
|
|
"id",
|
|
models.AutoField(
|
|
auto_created=True, primary_key=True, serialize=False, verbose_name="ID"
|
|
),
|
|
),
|
|
("name", models.TextField(max_length=150, unique=True)),
|
|
("mode", models.CharField(choices=[("user", "User"), ("role", "Role")])),
|
|
("permissions", models.ManyToManyField(blank=True, to="auth.permission")),
|
|
(
|
|
"role",
|
|
models.ForeignKey(
|
|
on_delete=django.db.models.deletion.CASCADE, to="authentik_rbac.role"
|
|
),
|
|
),
|
|
],
|
|
options={
|
|
"verbose_name": "Initial Permissions",
|
|
"verbose_name_plural": "Initial Permissions",
|
|
},
|
|
),
|
|
]
|