Skip to content

Add manage security policy as custom ability

Jarka Košanová requested to merge 440226-manage-sec-pol-links into master

What does this MR do and why?

It adds managing security policy links as a custom ability. The following actions are possible when a user has this custom ability assigned:

  • changing a security project assigned to a project or a group

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

manage-security-policy-links-recording

How to set up and validate locally

  1. Create a custom role with Manage security policy permission, eg. in http://gdk.test:3000/admin/application_settings/roles_and_permissions
  2. Assign this custom role to a user in a group
  3. Go to the project security policy page, eg. http://gdk.test:3000/flightjs/Flight/-/security/policies and make sure you can change a security project assigned to the project
  4. Do the same for the group (eg. http://gdk.test:3000/groups/flightjs/-/security/policies)

Related to #440226 (closed)

Edited by Jarka Košanová

Merge request reports