Update policies def

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
This commit is contained in:
Bryan Frimin
2025-12-23 09:46:07 +01:00
parent cc964ecc91
commit 6291402fb8

View File

@@ -49,7 +49,10 @@ var ViewerPolicy = policy.NewPolicy(
// Entity read actions
policy.Allow(
ActionPeopleGet, ActionPeopleList,
ActionVendorList,
ActionVendorGet, ActionVendorList,
ActionVendorContactGet,
ActionVendorServiceGet,
ActionVendorComplianceReportGet,
ActionFrameworkGet, ActionFrameworkList,
ActionControlList,
ActionMeasureGet, ActionMeasureList,
@@ -68,7 +71,7 @@ var ViewerPolicy = policy.NewPolicy(
ActionContinualImprovementList,
ActionProcessingActivityList,
ActionSnapshotList,
ActionMeetingList,
ActionMeetingGet, ActionMeetingList,
ActionFileGet, ActionFileDownloadUrl,
ActionSlackConnectionList,
).WithSID("entity-read-access"),
@@ -76,6 +79,7 @@ var ViewerPolicy = policy.NewPolicy(
// TrustCenter read actions
policy.Allow(
ActionTrustCenterGet,
ActionTrustCenterAccessGet,
ActionTrustCenterFileGet, ActionTrustCenterFileList,
).WithSID("trust-center-read-access"),
@@ -106,7 +110,10 @@ var AuditorPolicy = policy.NewPolicy(
// Entity read access (same as viewer)
policy.Allow(
ActionPeopleGet, ActionPeopleList,
ActionVendorList,
ActionVendorGet, ActionVendorList,
ActionVendorContactGet,
ActionVendorServiceGet,
ActionVendorComplianceReportGet,
ActionFrameworkGet, ActionFrameworkList,
ActionControlList,
ActionMeasureGet, ActionMeasureList,
@@ -124,6 +131,7 @@ var AuditorPolicy = policy.NewPolicy(
ActionContinualImprovementList,
ActionProcessingActivityList,
ActionSnapshotList,
ActionMeetingGet, ActionMeetingList,
ActionFileGet, ActionFileDownloadUrl,
).WithSID("entity-read-access"),