rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Style

Browse Source 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
This commit is contained in:
Bryan Frimin
2026-03-20 18:16:32 +01:00
parent 3b5122da5e
commit 3bb27fe8f1
3 changed files with 19 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
pkg/iam/iam_policies.go
View File

@@ -316,7 +316,9 @@ var IAMAdminPolicy = policy.NewPolicy(
ActionAuditLogEntryList,
).
WithSID("audit-log-entry-admin-access").
When(policy.Equals("principal.organization_id", "resource.organization_id")),
When(
policy.Equals("principal.organization_id", "resource.organization_id"),
),
).
WithDescription("IAM admin access - can manage members but cannot delete organization or manage SAML/SCIM")
@@ -358,6 +360,8 @@ var IAMViewerPolicy = policy.NewPolicy(
ActionAuditLogEntryList,
).
WithSID("audit-log-entry-viewer-access").
When(policy.Equals("principal.organization_id", "resource.organization_id")),
When(
policy.Equals("principal.organization_id", "resource.organization_id"),
),
).
WithDescription("Read-only IAM access for organization viewers")