permissions: temporary fix for submitting a record to community

invenio.cfg

@@ -11,7 +11,10 @@ import os
 
 from datetime import datetime
 from invenio_i18n import lazy_gettext as _
-from cds_rdm.permissions import CDSCommunitiesPermissionPolicy
+from cds_rdm.permissions import (
+    CDSCommunitiesPermissionPolicy,
+    CDSRDMRecordPermissionPolicy
+)
 from invenio_app_rdm.config import CELERY_BEAT_SCHEDULE as APP_RDM_CELERY_BEAT_SCHEDULE
 from celery.schedules import crontab
 
@@ -128,6 +131,12 @@ BASE_TEMPLATE = "cds_rdm/page.html"
 INSTANCE_THEME_FILE = './less/theme.less'
 
 
+# Invenio-rdm-records
+# ===================
+
+# Revert this when we manage to deploy latest app-rdm in prod
+RDM_PERMISSION_POLICY = CDSRDMRecordPermissionPolicy
+
 # Invenio-communities
 # ===================
 # Communities permission policy

site/cds_rdm/permissions.py

@@ -9,6 +9,7 @@
 """Permission policy."""
 
 from invenio_communities.permissions import CommunityPermissionPolicy
+from invenio_rdm_records.services.permissions import RDMRecordPermissionPolicy
 from invenio_records_permissions.generators import SystemProcess
 
 from .generators import CERNEmailsGroups
@@ -25,3 +26,16 @@ class CDSCommunitiesPermissionPolicy(CommunityPermissionPolicy):
         ),
         SystemProcess(),
     ]
+
+
+class CDSRDMRecordPermissionPolicy(RDMRecordPermissionPolicy):
+    """RDM record permission policy of CDS.
+
+    NOTE: THIS should be reverted once the latest code is deployed in prod!!!
+    """
+
+    #
+    # Record communities
+    #
+    # Who can add record to a community
+    can_add_community = RDMRecordPermissionPolicy.can_manage