pgadmin-org
/
pgadmin4
mirror of https://github.com/pgadmin-org/pgadmin4.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Added role-based restrictions for editing server connections. #1947

pull/8832/head
Rohit Bhati 2025-06-10 12:19:41 +05:30 committed by GitHub
parent 2e072baf72
commit 814250aade
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
4 changed files with 17 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
docs/en_US/images/permissions.png
View File

Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 124 KiB

After

Width:  |  Height:  |  Size: 121 KiB

1
web/pgadmin/browser/server_groups/servers/__init__.py
View File

@ -719,6 +719,7 @@ class ServerNode(PGChildNodeView):
return make_json_response(success=1,
info=gettext("Server deleted"))
@permissions_required(AllPermissionTypes.object_register_server)
@pga_login_required
def update(self, gid, sid):
"""Update the server settings"""

3
web/pgadmin/browser/static/js/node.js
View File

@ -141,6 +141,7 @@ define('pgadmin.browser.node', [
function() {
return !!(self.canEdit(...arguments));
} : (!!self.canEdit),
permission: self.type == 'server' ? AllPermissionTypes.OBJECT_REGISTER_SERVER : undefined,
}]);
}
@ -161,7 +162,7 @@ define('pgadmin.browser.node', [
function() {
return !!(self.canDrop(...arguments));
} : (!!self.canDrop),
permission: self.type == 'server' ? 'object_register_server' : undefined,
permission: self.type == 'server' ? AllPermissionTypes.OBJECT_REGISTER_SERVER : undefined,
}]);
if (self.canDropCascade) {

28
web/pgadmin/tools/user_management/PgAdminPermissions.py
View File

@ -48,12 +48,12 @@ class PgAdminPermissions:
self.add_permission(
AllPermissionCategories.object_explorer,
AllPermissionTypes.object_register_server,
gettext("Register/remove server")
gettext("Manage Server")
)
self.add_permission(
AllPermissionCategories.tools,
AllPermissionTypes.tools_query_tool,
gettext("Query tool")
gettext("Query Tool")
)
self.add_permission(
AllPermissionCategories.tools,
@ -63,32 +63,32 @@ class PgAdminPermissions:
self.add_permission(
AllPermissionCategories.tools,
AllPermissionTypes.tools_psql_tool,
gettext("PSQL tool")
gettext("PSQL Tool")
)
self.add_permission(
AllPermissionCategories.tools,
AllPermissionTypes.tools_backup,
gettext("Backup tool (including server and globals)")
gettext("Backup Tool (including server and globals)")
)
self.add_permission(
AllPermissionCategories.tools,
AllPermissionTypes.tools_restore,
gettext("Restore tool")
gettext("Restore Tool")
)
self.add_permission(
AllPermissionCategories.tools,
AllPermissionTypes.tools_import_export_data,
gettext("Import/export data")
gettext("Import/Export Data")
)
self.add_permission(
AllPermissionCategories.tools,
AllPermissionTypes.tools_import_export_servers,
gettext("Import/export servers")
gettext("Import/Export Servers")
)
self.add_permission(
AllPermissionCategories.tools,
AllPermissionTypes.tools_search_objects,
gettext("Search objects")
gettext("Search Objects")
)
self.add_permission(
AllPermissionCategories.tools,
@ -98,32 +98,32 @@ class PgAdminPermissions:
self.add_permission(
AllPermissionCategories.tools,
AllPermissionTypes.tools_schema_diff,
gettext("Schema diff")
gettext("Schema Diff")
)
self.add_permission(
AllPermissionCategories.tools,
AllPermissionTypes.tools_grant_wizard,
gettext("Grant wizard")
gettext("Grant Wizard")
)
self.add_permission(
AllPermissionCategories.tools,
AllPermissionTypes.tools_erd_tool,
gettext("ERD tool")
gettext("ERD Tool")
)
self.add_permission(
AllPermissionCategories.storage_manager,
AllPermissionTypes.storage_add_folder,
gettext("Add folder")
gettext("Add Folder")
)
self.add_permission(
AllPermissionCategories.storage_manager,
AllPermissionTypes.storage_remove_folder,
gettext("Delete file/folder")
gettext("Delete File/Folder")
)
self.add_permission(
AllPermissionCategories.miscellaneous,
AllPermissionTypes.change_password,
gettext("Change password")
gettext("Change Password")
)
def add_permission(self, category: str, permission: str, label: str):