Add CREATE_CCPO_USER permission, create context processor for ATAT so user_can and permissions can be used in the template, add placeholder button for adding new CCPO user

atst/domain/permission_sets.py

@@ -64,6 +64,7 @@ ATAT_PERMISSION_SETS = [
         "description": "",
         "permissions": [
             Permissions.VIEW_CCPO_USER,
+            Permissions.CREATE_CCPO_USER,
             Permissions.EDIT_CCPO_USER,
             Permissions.DELETE_CCPO_USER,
         ],

atst/models/permissions.py

@@ -2,6 +2,7 @@ class Permissions(object):
     # ccpo permissions
     VIEW_AUDIT_LOG = "view_audit_log"
     VIEW_CCPO_USER = "view_ccpo_user"
+    CREATE_CCPO_USER = "create_ccpo_user"
     EDIT_CCPO_USER = "edit_ccpo_user"
     DELETE_CCPO_USER = "delete_ccpo_user"
 

atst/routes/__init__.py

@@ -24,10 +24,12 @@ from atst.domain.common import Paginator
 from atst.domain.portfolios import Portfolios
 from atst.domain.authz.decorator import user_can_access_decorator as user_can
 from atst.models.permissions import Permissions
+from atst.utils.context_processors import atat as atat_context_processor
 from atst.utils.flash import formatted_flash as flash
 
 
 bp = Blueprint("atst", __name__)
+bp.context_processor(atat_context_processor)
 
 
 @bp.route("/")

atst/utils/context_processors.py

@@ -119,3 +119,10 @@ def portfolio():
         "funding_end_date": funding_end_date,
         "funded": funded,
     }
+
+
+def atat():
+    return {
+        "permissions": Permissions,
+        "user_can": user_can_view,
+    }

templates/ccpo/users.html

@@ -1,5 +1,7 @@
 {% extends "base.html" %}
 
+{% from "components/icon.html" import Icon %}
+
 {% block content %}
   <div class='col'>
     <div class="h2">
@@ -24,4 +26,11 @@
       </tbody>
     </table>
   </div>
+
+  {% if user_can(permissions.CREATE_CCPO_USER) %}
+    <a class="icon-link modal-link" v-on:click="openModal()">
+      Add new CCPO user {{ Icon("plus") }}
+    </a>
+  {% endif %}
+
 {% endblock %}