Fix invitation delete permission

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-17 09:58:40 +01:00
parent 3fcabc6a62
commit 15d223a761
2 changed files with 3 additions and 2 deletions
--- a/apps/console/src/pages/organizations/settings/MembersSettingsTab.tsx
+++ b/apps/console/src/pages/organizations/settings/MembersSettingsTab.tsx
@@ -376,7 +376,7 @@ function InvitationRow(props: {
          {isDeleting ? (
            <Spinner size={16} />
          ) : (
-            <Authorized entity="Organization" action="deleteInvitation">
+            <Authorized entity="Invitation" action="deleteInvitation">
              <Button
                variant="danger"
                onClick={onDelete}
--- a/pkg/authz/permissions.go
+++ b/pkg/authz/permissions.go
@@ -291,7 +291,6 @@ var Permissions = map[uint16]map[Action][]Role{
 		ActionDeleteOrganizationHorizontalLogo: EditRoles,
 		ActionCreateTrustCenter:                EditRoles,
 		ActionInviteUser:                       EditRoles,
-		ActionDeleteInvitation:                 EditRoles,
 		ActionUpdateMembership:                 EditRoles,
 		ActionCreatePeople:                     EditRoles,
 		ActionCreateVendor:                     EditRoles,
@@ -370,6 +369,8 @@ var Permissions = map[uint16]map[Action][]Role{
 	coredata.InvitationEntityType: {
 		ActionGet:             AllRoles,
 		ActionGetOrganization: AllRoles,
+
+		ActionDeleteInvitation: EditRoles,
 	},
 	coredata.PeopleEntityType: {
 		ActionGet: AllRoles,