opendev/gerrit
Code Issues Proposed changes

Allow to delegate modify account commands to non administrators

Browse Source 
Currently only administrators groups allow to modify accounts. This
is impractical on very big installations. Add modify account global
capability and allow administrators to optionally delegate this job.

Bug: Issue 2786
Change-Id: Icc105c39e76908a075e89ec14921972b91866dd4
This commit is contained in:
David Ostrovsky
2014-07-22 00:55:47 +02:00
committed by David Pursehouse
parent e715d2484a
commit aa49e277a3
20 changed files with 48 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
gerrit-common/src/main/java/com/google/gerrit/common/data/GlobalCapability.java
View File

@@ -38,6 +38,9 @@ public class GlobalCapability {
/** Can create any account on the server. */
public static final String CREATE_ACCOUNT = "createAccount";
/** Can modify any account on the server. */
public static final String MODIFY_ACCOUNT = "modifyAccount";
/** Can create any group on the server. */
public static final String CREATE_GROUP = "createGroup";
@@ -108,6 +111,7 @@ public class GlobalCapability {
NAMES_ALL.add(FLUSH_CACHES);
NAMES_ALL.add(GENERATE_HTTP_PASSWORD);
NAMES_ALL.add(KILL_TASK);
NAMES_ALL.add(MODIFY_ACCOUNT);
NAMES_ALL.add(PRIORITY);
NAMES_ALL.add(QUERY_LIMIT);
NAMES_ALL.add(RUN_AS);