Bypass permissions check as command does not have a user

liveblog · May 7, 2024 · 38e904c · 38e904c
1 parent 7756ce7
commit 38e904c
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/server/liveblog/instance_settings/instance_settings.py b/server/liveblog/instance_settings/instance_settings.py
@@ -59,7 +59,8 @@ def is_user_authorized(self):
         return flask.g.user.get("is_support", False)
 
     def create(self, docs, **kwargs):
-        if not self.is_user_authorized():
+        # skip permissions if it's comming from initialize_data command
+        if not app.is_initialize_data and not self.is_user_authorized():
             raise SuperdeskApiError.forbiddenError(
                 message="You do not have permissions to execute this action."
             )

diff --git a/server/liveblog/prepopulate/app_initialize.py b/server/liveblog/prepopulate/app_initialize.py
@@ -37,7 +37,7 @@
 __entities__ = OrderedDict(
     [
         ("global_preferences", ("global_preferences.json", ["key"], False)),
-        ("instance_settings", ("instance_settings.json", ["settings"], False)),
+        ("instance_settings", ("instance_settings.json", ["settings"], True)),
         ("roles", ("roles.json", ["name"], True)),
         ("users", ("users.json", [], False)),
         ("stages", ("stages.json", ["desk"], False)),
@@ -293,6 +293,7 @@ def run(
 
         # create indexes in mongo
         app.init_indexes()
+        app.is_initialize_data = True
 
         if init_index_only:
             logger.info("Only indexes initialized.")