From 2ab48173c9c19b3603ec4859ed2f62bb0e66944c Mon Sep 17 00:00:00 2001
From: Johannes Nussbaum <johannes.nussbaum@dasch.swiss>
Date: Sun, 15 Oct 2023 20:15:11 +0200
Subject: [PATCH] add AP to tanner

---
 dsp_permissions_scripts/scenario-tanner.py | 42 ++++++++++++++++++++++
 1 file changed, 42 insertions(+)

diff --git a/dsp_permissions_scripts/scenario-tanner.py b/dsp_permissions_scripts/scenario-tanner.py
index 73536fcf..55c91a72 100644
--- a/dsp_permissions_scripts/scenario-tanner.py
+++ b/dsp_permissions_scripts/scenario-tanner.py
@@ -2,6 +2,9 @@
 
 from dotenv import load_dotenv
 
+from dsp_permissions_scripts.ap.ap_get import get_aps_of_project
+from dsp_permissions_scripts.ap.ap_serialize import serialize_aps_of_project
+from dsp_permissions_scripts.ap.ap_set import delete_ap
 from dsp_permissions_scripts.doap.doap_get import get_doaps_of_project
 from dsp_permissions_scripts.doap.doap_model import Doap
 from dsp_permissions_scripts.doap.doap_serialize import serialize_doaps_of_project
@@ -31,6 +34,40 @@ def modify_oaps(oaps: list[Oap]) -> list[Oap]:
     return oaps
 
 
+def update_aps(
+    host: str,
+    shortcode: str,
+    token: str,
+) -> None:
+    """Delete the Administrative Permission that allows the ProjectMember to create resources."""
+    project_aps = get_aps_of_project(
+        host=host,
+        shortcode=shortcode,
+        token=token,
+    )
+    serialize_aps_of_project(
+        project_aps=project_aps,
+        shortcode=shortcode,
+        mode="original",
+    )
+    _ = delete_ap(
+        host=host,
+        token=token,
+        existing_aps=project_aps,
+        forGroup=builtin_groups.PROJECT_MEMBER,
+    )
+    project_aps_updated = get_aps_of_project(
+        host=host,
+        shortcode=shortcode,
+        token=token,
+    )
+    serialize_aps_of_project(
+        project_aps=project_aps_updated,
+        shortcode=shortcode,
+        mode="modified",
+    )
+
+
 def update_doaps(
     host: str,
     shortcode: str,
@@ -108,6 +145,11 @@ def fix_scenario_tanner() -> None:
     shortcode = "0102"
     token = login(host)
 
+    update_aps(
+        host=host,
+        shortcode=shortcode,
+        token=token,
+    )
     update_doaps(
         host=host,
         shortcode=shortcode,