RHINENG-15783: remove permissions for deleted APIs

Author: MichaelMraka

manager/middlewares/rbac.go

@@ -29,10 +29,6 @@ const patchWritePerm = "patch:*:write"
 
 // handlerName to permissions mapping
 var granularPerms = map[string]string{
-	"CreateBaselineHandler":        "patch:template:write",
-	"BaselineUpdateHandler":        "patch:template:write",
-	"BaselineDeleteHandler":        "patch:template:write",
-	"BaselineSystemsRemoveHandler": "patch:template:write",
 	"TemplateSystemsUpdateHandler": "content-sources:templates:write",
 	"TemplateSystemsDeleteHandler": "content-sources:templates:write",
 	"SystemDeleteHandler":          "patch:system:write",

manager/middlewares/rbac_test.go

@@ -47,50 +47,50 @@ func TestRBACPut(t *testing.T) {
 }
 
 func TestPermissionsSingleWrite(t *testing.T) {
-	// handler needs `patch:template:write`
-	handler := "CreateBaselineHandler"
+	// handler needs `content-sources:templates:write`
+	handler := "TemplateSystemsUpdateHandler"
 	access := rbac.AccessPagination{
 		Data: []rbac.Access{
-			{Permission: "patch:*:*"},
+			{Permission: "content-sources:*:*"},
 			{Permission: "inventory:*:*"},
 		},
 	}
 	assert.True(t, checkPermissions(&access, handler, "PUT"))
 
 	access = rbac.AccessPagination{
 		Data: []rbac.Access{
-			{Permission: "patch:*:write"},
+			{Permission: "content-sources:*:write"},
 			{Permission: "inventory:*:*"},
 		},
 	}
 	assert.True(t, checkPermissions(&access, handler, "PUT"))
 
 	access = rbac.AccessPagination{
 		Data: []rbac.Access{
-			{Permission: "patch:template:write"},
+			{Permission: "content-sources:templates:write"},
 			{Permission: "inventory:*:*"},
 		},
 	}
 	assert.True(t, checkPermissions(&access, handler, "PUT"))
 
 	access = rbac.AccessPagination{
 		Data: []rbac.Access{
-			{Permission: "patch:asdf:write"},
+			{Permission: "content-sources:asdf:write"},
 		},
 	}
 	assert.False(t, checkPermissions(&access, handler, "PUT"))
 
 	access = rbac.AccessPagination{
 		Data: []rbac.Access{
-			{Permission: "patch:asdf:read"},
+			{Permission: "content-sources:asdf:read"},
 			{Permission: "inventory:*:*"},
 		},
 	}
 	assert.False(t, checkPermissions(&access, handler, "PUT"))
 
 	access = rbac.AccessPagination{
 		Data: []rbac.Access{
-			{Permission: "patch:*:read"},
+			{Permission: "content-sources:*:read"},
 			{Permission: "inventory:*:*"},
 		},
 	}