editoast: add authorization to the rolling stock endpoints - #17364

Draft

younesschrifi wants to merge 24 commits into

devfrom

feature-branch/check-rolling-stock-privileges

Commits on Aug 18, 2026

editoast: implement authorizers::require utility function
younesschrifi
committed
495f1e7
editoast: adapt get_by_id and get_by_name rolling stock endpoints
younesschrifi
committed
79a138d
editoast: list rolling_stocks privileges
younesschrifi
committed
e4489b7
editoast: views: split a few tests in smaller ones

Sh099078
authored and
younesschrifi
committed
813a9cc
editoast: add check privilege to the update rolling stock endpoint
younesschrifi
committed
2b6cab5
editoast: add check privilege to delete rolling stock endpoint
younesschrifi
committed
3af45bd
editoast: add privileges check for patch /rolling_stock/{id}/locked endpoint
younesschrifi
committed
b6ad7bd
editoast: add authorization to POST:/rolling_stock/{id}/livery

Sh099078
authored and
younesschrifi
committed
5ed3ac5
editoast: add authorization to `GET:rolling_stock/{id}/usage`

Sh099078
authored and
younesschrifi
committed
4067436
editoast: check consists permission in POST/timetable/id/stdcm endpoint

Sh099078
authored and
younesschrifi
committed
8ec6907
editoast: use v2 infra_privileges
younesschrifi
committed
9a2c7c9
editoast: add rolling_stock check for simulation endpoint
younesschrifi
committed
cd58ebf
fixup simulation authz

Sh099078
authored and
younesschrifi
committed
216222a
editoast: add check rolling stock for simulation_summary endpoint
younesschrifi
committed
77f40b4
editoast: give to POST/rolling_stock issuer the rolling stock ownership

Sh099078
authored and
younesschrifi
committed
01ac841
editoast: authorize the rolling stock in GET/train_schedule/{id}/path

Sh099078
authored and
younesschrifi
committed
f50a095
editoast: add authorization to /train_schedule/{id}/etcs_braking_curves

Sh099078
authored and
younesschrifi
committed
5043ba8
editoast: only authorize admins in GET/timetable/{id}/requirements

Sh099078
authored and
younesschrifi
committed
c61e8d8
editoast: add authorisation check on project_path_op
younesschrifi
committed
2d0923b
editoast: add privilege check for track_occupancy endpoint
younesschrifi
committed
6052bc3
editoast: add authorisation checks to level crossing occupancy endpoint
younesschrifi
committed
6eb72f5
editoast: add CanRead check for project path endpoint
younesschrifi
committed
62cf918
editoast: filter out unauthorized trains in GET/timetable/id/conflicts

Sh099078
authored and
younesschrifi
committed
0ff07e0
editoast: filter forbidden trains in /train_schedule/occupancy_blocks

Sh099078
authored and
younesschrifi
committed
280878e

Navigation Menu

Uh oh!

editoast: add authorization to the rolling stock endpoints - #17364

editoast: add authorization to the rolling stock endpoints#17364
younesschrifi wants to merge 24 commits into
devfrom
feature-branch/check-rolling-stock-privileges

Commits on Aug 18, 2026

editoast: implement authorizers::require utility function

editoast: adapt get_by_id and get_by_name rolling stock endpoints

editoast: list rolling_stocks privileges

editoast: views: split a few tests in smaller ones

editoast: add check privilege to the update rolling stock endpoint

editoast: add check privilege to delete rolling stock endpoint

editoast: add privileges check for patch /rolling_stock/{id}/locked endpoint

editoast: add authorization to POST:/rolling_stock/{id}/livery

editoast: add authorization to `GET:rolling_stock/{id}/usage`

editoast: check consists permission in POST/timetable/id/stdcm endpoint

editoast: use v2 infra_privileges

editoast: add rolling_stock check for simulation endpoint

fixup simulation authz

editoast: add check rolling stock for simulation_summary endpoint

editoast: give to POST/rolling_stock issuer the rolling stock ownership

editoast: authorize the rolling stock in GET/train_schedule/{id}/path

editoast: add authorization to /train_schedule/{id}/etcs_braking_curves

editoast: only authorize admins in GET/timetable/{id}/requirements

editoast: add authorisation check on project_path_op

editoast: add privilege check for track_occupancy endpoint

editoast: add authorisation checks to level crossing occupancy endpoint

editoast: add CanRead check for project path endpoint

editoast: filter out unauthorized trains in GET/timetable/id/conflicts

editoast: filter forbidden trains in /train_schedule/occupancy_blocks