undo supoprt role

Author: pcrespov

packages/common-library/src/common_library/users_enums.py

@@ -6,7 +6,6 @@
     "GUEST": 10,
     "USER": 20,
     "TESTER": 30,
-    "PRODUCT_SUPPORT": 35,
     "PRODUCT_OWNER": 40,
     "ADMIN": 100,
 }
@@ -34,7 +33,6 @@ class UserRole(Enum):
     GUEST = "GUEST"
     USER = "USER"
     TESTER = "TESTER"
-    PRODUCT_SUPPORT = "PRODUCT_SUPPORT"
     PRODUCT_OWNER = "PRODUCT_OWNER"
     ADMIN = "ADMIN"
 

packages/models-library/src/models_library/api_schemas_webserver/users.py

@@ -88,7 +88,6 @@ class MyProfileRestGet(OutputSchemaWithoutCamelCase):
         "GUEST",
         "USER",
         "TESTER",
-        "PRODUCT_SUPPORT",
         "PRODUCT_OWNER",
         "ADMIN",
     ]

packages/postgres-database/src/simcore_postgres_database/migration/versions/1546c76e03f0_updates_user_roles_with_product_support_.py

@@ -3,7 +3,7 @@
   "info": {
     "title": "osparc.io public API",
     "description": "osparc-simcore public API specifications",
-    "version": "0.13.0"
+    "version": "0.13.1"
   },
   "paths": {
     "/v0/meta": {
@@ -12582,7 +12582,6 @@
           "GUEST",
           "USER",
           "TESTER",
-          "PRODUCT_SUPPORT",
           "PRODUCT_OWNER",
           "ADMIN"
         ],

services/api-server/openapi.json

@@ -22,7 +22,6 @@ class UserRoleEnum(StrAutoEnum):
     GUEST = auto()
     USER = auto()
     TESTER = auto()
-    PRODUCT_SUPPORT = auto()
     PRODUCT_OWNER = auto()
     ADMIN = auto()
 

services/api-server/src/simcore_service_api_server/models/schemas/profiles.py

@@ -13838,7 +13838,6 @@ components:
           - GUEST
           - USER
           - TESTER
-          - PRODUCT_SUPPORT
           - PRODUCT_OWNER
           - ADMIN
           title: Role

services/web/server/src/simcore_service_webserver/api/v0/openapi.yaml

@@ -104,20 +104,15 @@ class PermissionDict(TypedDict, total=False):
         ],
         inherits=[UserRole.USER],
     ),
-    UserRole.PRODUCT_SUPPORT: PermissionDict(
-        can=[
-            "product.details.*",
-            "admin.users.read",
-        ],
-        inherits=[UserRole.TESTER],
-    ),
     UserRole.PRODUCT_OWNER: PermissionDict(
         # NOTE: Add `tags=["po"]` to entrypoints with this access requirements
         can=[
-            "product.invitations.create",
+            "admin.users.read",
             "admin.users.write",
+            "product.details.*",
+            "product.invitations.create",
         ],
-        inherits=[UserRole.PRODUCT_SUPPORT],
+        inherits=[UserRole.TESTER],
     ),
     UserRole.ADMIN: PermissionDict(
         can=[

services/web/server/src/simcore_service_webserver/security/_authz_access_roles.py

@@ -95,9 +95,8 @@ async def mock_send_message(msg):
         *(
             (role, status.HTTP_403_FORBIDDEN)
             for role in UserRole
-            if UserRole.ANONYMOUS < role < UserRole.PRODUCT_SUPPORT
+            if UserRole.ANONYMOUS < role < UserRole.PRODUCT_OWNER
         ),
-        (UserRole.PRODUCT_SUPPORT, status.HTTP_200_OK),
         (UserRole.PRODUCT_OWNER, status.HTTP_200_OK),
         (UserRole.ADMIN, status.HTTP_200_OK),
     ],