nofusscomputing/centurion_erp
1
0
Fork 0
Code Issues Wiki Activity

feat(api): configure team permissions

Browse Source 
!5 closes #36
This commit is contained in:
Jon Lockwood
2024-05-30 22:39:15 +09:30
parent 8572b3b3c4
commit c0a09d5d50
5 changed files with 151 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
docs/projects/django-template/api.md
View File

@ -61,3 +61,12 @@ Report Format
## User Token
To generate a user token to access the api, use command `python3 manage.py drf_create_token <username>`
## Team Permissions
- url `/api/organization/<organization id>/team/<team id>/permissions`, `HTTP/POST` = replace permissions with those in body
- url `/api/organization/<organization id>/team/<team id>/permissions`, `HTTP/PATCH` = amend permissions to include those in body
- url `/api/organization/<organization id>/team/<team id>/permissions`, `HTTP/DELETE` = delete ALL permissions
HTTP/POST or HTTP/PATCH with list of permission in format `<module name>.<permission>_<model>`. i.e for adding a itam device permission would be `itam.add_device`. if the method is post only the permissions in the post request will remain, the others will be deleted. If method is patch, those in request body will be added.