Show patch link on the API resource when patch permission is present …

…and add patch ResourceMethod to the schema.

pkg/resources/common/formatter.go

@@ -98,6 +98,7 @@ func formatter(summarycache *summarycache.SummaryCache, asl accesscontrol.Access
 		}
 		hasUpdate := accessSet.Grants("update", gvr.GroupResource(), resource.APIObject.Namespace(), resource.APIObject.Name())
 		hasDelete := accessSet.Grants("delete", gvr.GroupResource(), resource.APIObject.Namespace(), resource.APIObject.Name())
+		hasPatch := accessSet.Grants("patch", gvr.GroupResource(), resource.APIObject.Namespace(), resource.APIObject.Name())
 
 		selfLink := selfLink(gvr, meta)
 
@@ -122,6 +123,15 @@ func formatter(summarycache *summarycache.SummaryCache, asl accesscontrol.Access
 		} else {
 			delete(resource.Links, "remove")
 		}
+		if hasPatch {
+			if attributes.DisallowMethods(resource.Schema)[http.MethodPut] {
+				resource.Links["patch"] = "blocked"
+			} else {
+				resource.Links["patch"] = u
+			}
+		} else {
+			delete(resource.Links, "patch")
+		}
 
 		if unstr, ok := resource.APIObject.Object.(*unstructured.Unstructured); ok {
 			// with the sql cache, these were already added by the indexer. However, the sql cache

pkg/schema/factory.go

@@ -157,6 +157,9 @@ func (c *Collection) schemasForSubject(access *accesscontrol.AccessSet) (*types.
 		if verbAccess.AnyVerb("create") {
 			s.CollectionMethods = append(s.CollectionMethods, allowed(http.MethodPost))
 		}
+		if verbAccess.AnyVerb("patch") {
+			s.ResourceMethods = append(s.ResourceMethods, allowed(http.MethodPatch))
+		}
 
 		if len(s.CollectionMethods) == 0 && len(s.ResourceMethods) == 0 {
 			continue