feat: add can_manage_script_template permission check
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -169,3 +169,19 @@ def can_create_step_category(user: User, account_id: Optional[UUID]) -> bool:
|
|||||||
if user.account_role == "owner" and account_id == user.account_id and user.account_id is not None:
|
if user.account_role == "owner" and account_id == user.account_id and user.account_id is not None:
|
||||||
return True
|
return True
|
||||||
return False
|
return False
|
||||||
|
|
||||||
|
|
||||||
|
def can_manage_script_template(user: User, template_created_by: Optional[UUID], template_account_id: Optional[UUID] = None) -> bool:
|
||||||
|
"""Can the user edit/delete this script template?
|
||||||
|
|
||||||
|
- Super admins can manage any template
|
||||||
|
- Account owners can manage any template in their account
|
||||||
|
- Engineers can manage templates they created
|
||||||
|
"""
|
||||||
|
if user.is_super_admin:
|
||||||
|
return True
|
||||||
|
if user.account_role == "owner" and template_account_id == user.account_id and user.account_id is not None:
|
||||||
|
return True
|
||||||
|
if template_created_by == user.id:
|
||||||
|
return True
|
||||||
|
return False
|
||||||
|
|||||||
Reference in New Issue
Block a user