Bug 22227: Make GET /cities staff only
authorTomas Cohen Arazi <tomascohen@theke.io>
Tue, 29 Jan 2019 14:29:06 +0000 (11:29 -0300)
committerNick Clemens <nick@bywatersolutions.com>
Fri, 15 Feb 2019 18:42:46 +0000 (18:42 +0000)
commit6aadbcc4be65185a56a79980bea54bc4d74fe356
tree053041402cf911b992cbd395c2f42d938f82b496
parentb7b4694666657f57aaf61d091ed34c9f754a11e3
Bug 22227: Make GET /cities staff only

This patch removes the possibility to access the city objects without
privileged access (minimum permissions == catalogue).

It does so by adding the required permissions to the spec. The tests are
adjusted.

To test:
- Apply this patch
- Run:
  $ kshell
 k$ prove t/db_dependent/api/v1/cities.t
=> SUCCESS: Tests pass!
- Sign off :-D

Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
api/v1/swagger/paths/cities.json
t/db_dependent/api/v1/cities.t