Commit d61293cc authored by Romain Courteaud's avatar Romain Courteaud

slapos_erp5: shadow user do not need access to Compute Node anymore

parent 7c8d9857
<type_roles> <type_roles>
<role id='Auditor'>
<property id='title'>Allocation scope</property>
<property id='condition'>python: here.getAllocationScope('').startswith('open')</property>
<property id='base_category_script'>ComputeNode_getSecurityCategoryFromAllocationScope</property>
<multi_property id='categories'>local_role_group/shadow</multi_property>
<multi_property id='base_category'>aggregate</multi_property>
</role>
<role id='Auditor'>
<property id='title'>Member access</property>
<property id='condition'>python: here.getValidationState() == 'validated'</property>
<property id='base_category_script'>ComputeNode_getSecurityCategoryFromValidationState</property>
<multi_property id='categories'>local_role_group/shadow</multi_property>
<multi_property id='base_category'>aggregate</multi_property>
</role>
<role id='Assignee'> <role id='Assignee'>
<property id='title'>Organisation Member</property> <property id='title'>Organisation Member</property>
<property id='base_category_script'>Item_getSecurityCategoryFromMovementDestinationSection</property> <property id='base_category_script'>Item_getSecurityCategoryFromMovementDestinationSection</property>
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment