Oved Ourfali has uploaded a new change for review.

Change subject: core: add read only admin role
......................................................................

core: add read only admin role

Change-Id: Ia00167f08752749b1b01447c5c910e263c6301ce
Signed-off-by: Oved Ourfali <oourf...@redhat.com>
---
A packaging/dbscripts/upgrade/03_04_0160_create_read_only_admin_role.sql
1 file changed, 27 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-engine refs/changes/53/21953/1

diff --git 
a/packaging/dbscripts/upgrade/03_04_0160_create_read_only_admin_role.sql 
b/packaging/dbscripts/upgrade/03_04_0160_create_read_only_admin_role.sql
new file mode 100644
index 0000000..e51fe40
--- /dev/null
+++ b/packaging/dbscripts/upgrade/03_04_0160_create_read_only_admin_role.sql
@@ -0,0 +1,27 @@
+Create or replace FUNCTION __temp_insert_read_only_admin_role()
+RETURNS VOID
+   AS $procedure$
+   DECLARE
+   v_ROLE_ID UUID;
+BEGIN
+   v_ROLE_ID := 'DEF0000C-0000-0000-0000-DEF00000000C';
+
+DELETE FROM roles_groups WHERE role_id = v_ROLE_ID;
+INSERT INTO 
roles(id,name,description,is_readonly,role_type,allows_viewing_children,app_mode)
 SELECT v_ROLE_ID, 'ReadOnlyAdmin', 'Read Only Administrator Role', true, 1, 
true, 1
+WHERE NOT EXISTS (SELECT id,name,description,is_readonly,role_type
+                  FROM roles
+                  WHERE id = v_ROLE_ID
+                  AND name='ReadOnlyAdmin'
+                  AND description='Read Only Administrator Role'
+                  AND is_readonly=true
+                  AND role_type=1);
+
+-- Allowing this role to login
+INSERT INTO roles_groups(role_id,action_group_id) VALUES(v_ROLE_ID, 1300);
+
+RETURN;
+END; $procedure$
+LANGUAGE plpgsql;
+
+SELECT __temp_insert_read_only_admin_role();
+DROP function __temp_insert_read_only_admin_role();


-- 
To view, visit http://gerrit.ovirt.org/21953
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ia00167f08752749b1b01447c5c910e263c6301ce
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Oved Ourfali <oourf...@redhat.com>
_______________________________________________
Engine-patches mailing list
Engine-patches@ovirt.org
http://lists.ovirt.org/mailman/listinfo/engine-patches

Reply via email to