CGM_Public/pretix_original
3
0
Fork 1
mirror of https://github.com/pretix/pretix.git synced 2026-08-27 13:24:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

pretixSCAN: Add new security profile PretixScanNoSyncSecurityProfile

Browse Source
This commit is contained in:
Raphael Michel
2021-07-23 18:48:40 +02:00
parent db65c14733
commit e04793d2eb
1 changed files with 33 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pretix/api/auth/devicesecurity.py
+33 -2
View File
@@ -70,9 +70,9 @@ class PretixScanSecurityProfile(AllowListSecurityProfile):
) )
class PretixScanNoSyncSecurityProfile(AllowListSecurityProfile): class PretixScanNoSyncNoSearchSecurityProfile(AllowListSecurityProfile):
identifier = 'pretixscan_online_kiosk' identifier = 'pretixscan_online_kiosk'
verbose_name = _('pretixSCAN (kiosk mode, online only)') verbose_name = _('pretixSCAN (kiosk mode, no order sync, no search)')
allowlist = ( allowlist = (
('GET', 'api-v1:version'), ('GET', 'api-v1:version'),
('GET', 'api-v1:device.eventselection'), ('GET', 'api-v1:device.eventselection'),
@@ -99,6 +99,36 @@ class PretixScanNoSyncSecurityProfile(AllowListSecurityProfile):
) )
class PretixScanNoSyncSecurityProfile(AllowListSecurityProfile):
identifier = 'pretixscan_online_noorders'
verbose_name = _('pretixSCAN (online only, no order sync)')
allowlist = (
('GET', 'api-v1:version'),
('GET', 'api-v1:device.eventselection'),
('POST', 'api-v1:device.update'),
('POST', 'api-v1:device.revoke'),
('POST', 'api-v1:device.roll'),
('GET', 'api-v1:event-list'),
('GET', 'api-v1:event-detail'),
('GET', 'api-v1:subevent-list'),
('GET', 'api-v1:subevent-detail'),
('GET', 'api-v1:itemcategory-list'),
('GET', 'api-v1:item-list'),
('GET', 'api-v1:question-list'),
('GET', 'api-v1:badgelayout-list'),
('GET', 'api-v1:badgeitem-list'),
('GET', 'api-v1:checkinlist-list'),
('GET', 'api-v1:checkinlist-status'),
('POST', 'api-v1:checkinlist-failed_checkins'),
('GET', 'api-v1:checkinlistpos-list'),
('POST', 'api-v1:checkinlistpos-redeem'),
('GET', 'api-v1:revokedsecrets-list'),
('GET', 'api-v1:orderposition-pdf_image'),
('GET', 'api-v1:event.settings'),
('POST', 'api-v1:upload'),
)
class PretixPosSecurityProfile(AllowListSecurityProfile): class PretixPosSecurityProfile(AllowListSecurityProfile):
identifier = 'pretixpos' identifier = 'pretixpos'
verbose_name = _('pretixPOS') verbose_name = _('pretixPOS')
@@ -160,6 +190,7 @@ DEVICE_SECURITY_PROFILES = {
FullAccessSecurityProfile, FullAccessSecurityProfile,
PretixScanSecurityProfile, PretixScanSecurityProfile,
PretixScanNoSyncSecurityProfile, PretixScanNoSyncSecurityProfile,
PretixScanNoSyncNoSearchSecurityProfile,
PretixPosSecurityProfile, PretixPosSecurityProfile,
) )
} }