I would like to create a user that can push content into all existing repositories but not edit the repositories themselves. That means: UPDATE on /v2/repositories/<repo_id>/actions/import_upload/ Without wildcards, the permission needs to be granted separately for each repo. Instead, it would be helpful to have: UPDATE on /v2/repositories/*/actions/import_upload/
Moved to https://pulp.plan.io/issues/227