This is an automated email from the ASF dual-hosted git repository.

zrhoffman pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/trafficcontrol.git


The following commit(s) were added to refs/heads/master by this push:
     new 2e397e4867 adds missing read permissions to roles: r/o, portal, 
federation, stee… (#7343)
2e397e4867 is described below

commit 2e397e4867a8a05b3644597942e54fb7d756c044
Author: Jeremy Mitchell <[email protected]>
AuthorDate: Mon Mar 13 16:43:37 2023 -0600

    adds missing read permissions to roles: r/o, portal, federation, stee… 
(#7343)
    
    * adds missing read permissions to roles: r/o, portal, federation, steering 
and operations
    
    * creates changelog entry
---
 CHANGELOG.md                 | 1 +
 traffic_ops/app/db/seeds.sql | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e08f0c9b76..05d6a31ef1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -27,6 +27,7 @@ The format is based on [Keep a 
Changelog](http://keepachangelog.com/en/1.0.0/).
 - [#7176](https://github.com/apache/trafficcontrol/pull/7176) *ATC Build 
system* Support building ATC for the `aarch64` CPU architecture
 - [#7113](https://github.com/apache/trafficcontrol/pull/7113) *Traffic Portal* 
Minimize the Server Server Capability part of the *Traffic Servers* section of 
the Snapshot Diff
 - [#7273](https://github.com/apache/trafficcontrol/pull/7273) *Traffic Ops* 
Adds SSL-KEY-EXPIRATION:READ permission to operations, portal, read-only, 
federation and steering roles
+- [#7343](https://github.com/apache/trafficcontrol/pull/7343) *Traffic Ops* 
Adds ACME:READ, CDNI-ADMIN:READ and CDNI-CAPACITY:READ permissions to 
operations, portal, read-only, federation and steering roles
 - [#7296](https://github.com/apache/trafficcontrol/pull/7296) *Traffic Portal* 
New configuration option in `traffic_portal_properties.json` at 
`deliveryServices.exposeInactive` controls exposing APIv5 DS Active State 
options in the TP UI.
 - [#7332](https://github.com/apache/trafficcontrol/pull/7332) *Traffic Ops* 
Creates new role needed for TR to watch TO resources.
 - [#7322](https://github.com/apache/trafficcontrol/issues/7322) *t3c Adds 
support for anycast on http routed edges.
diff --git a/traffic_ops/app/db/seeds.sql b/traffic_ops/app/db/seeds.sql
index cd7b516556..bc56b54f3b 100644
--- a/traffic_ops/app/db/seeds.sql
+++ b/traffic_ops/app/db/seeds.sql
@@ -102,12 +102,15 @@ INSERT INTO public.role_capability
 SELECT id, perm
 FROM public.role
 CROSS JOIN ( VALUES
+       ('ACME:READ'),
        ('ASN:READ'),
        ('ASYNC-STATUS:READ'),
        ('CACHE-GROUP:READ'),
        ('CAPABILITY:READ'),
        ('CDN-SNAPSHOT:READ'),
        ('CDN:READ'),
+       ('CDNI-ADMIN:READ'),
+       ('CDNI-CAPACITY:READ'),
        ('COORDINATE:READ'),
        ('DELIVERY-SERVICE:READ'),
        ('DIVISION:READ'),

Reply via email to