Infra/lemur
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Ensuring that authority owners can access certificates issued by that… (#526)

Browse Source 
* Ensuring that authority owners can access certificates issued by that authority
This commit is contained in:
kevgliss
2016-11-25 20:35:07 -08:00
committed by GitHub
parent 8e5323e2d7
commit 250558baf3
2 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
lemur/certificates/service.py
View File

@ -132,12 +132,18 @@ def update(cert_id, owner, description, notify, destinations, notifications, rep
def create_certificate_roles(**kwargs):
# create an role for the owner and assign it
owner_role = role_service.get_by_name(kwargs['owner'])
if not owner_role:
owner_role = role_service.create(
kwargs['owner'],
description="Auto generated role based on owner: {0}".format(kwargs['owner'])
)
# ensure that the authority's owner is also associated with the certificate
if kwargs.get('authority'):
authority_owner_role = role_service.get_by_name(kwargs['authority'].owner)
return [owner_role, authority_owner_role]
return [owner_role]