From 6291402fb821cd17ecd447a74c0bda7d511cfa56 Mon Sep 17 00:00:00 2001 From: Bryan Frimin Date: Tue, 23 Dec 2025 09:46:07 +0100 Subject: [PATCH] Update policies def Signed-off-by: Bryan Frimin --- pkg/probo/policies.go | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/pkg/probo/policies.go b/pkg/probo/policies.go index 5e0425040..a8346243b 100644 --- a/pkg/probo/policies.go +++ b/pkg/probo/policies.go @@ -49,7 +49,10 @@ var ViewerPolicy = policy.NewPolicy( // Entity read actions policy.Allow( ActionPeopleGet, ActionPeopleList, - ActionVendorList, + ActionVendorGet, ActionVendorList, + ActionVendorContactGet, + ActionVendorServiceGet, + ActionVendorComplianceReportGet, ActionFrameworkGet, ActionFrameworkList, ActionControlList, ActionMeasureGet, ActionMeasureList, @@ -68,7 +71,7 @@ var ViewerPolicy = policy.NewPolicy( ActionContinualImprovementList, ActionProcessingActivityList, ActionSnapshotList, - ActionMeetingList, + ActionMeetingGet, ActionMeetingList, ActionFileGet, ActionFileDownloadUrl, ActionSlackConnectionList, ).WithSID("entity-read-access"), @@ -76,6 +79,7 @@ var ViewerPolicy = policy.NewPolicy( // TrustCenter read actions policy.Allow( ActionTrustCenterGet, + ActionTrustCenterAccessGet, ActionTrustCenterFileGet, ActionTrustCenterFileList, ).WithSID("trust-center-read-access"), @@ -106,7 +110,10 @@ var AuditorPolicy = policy.NewPolicy( // Entity read access (same as viewer) policy.Allow( ActionPeopleGet, ActionPeopleList, - ActionVendorList, + ActionVendorGet, ActionVendorList, + ActionVendorContactGet, + ActionVendorServiceGet, + ActionVendorComplianceReportGet, ActionFrameworkGet, ActionFrameworkList, ActionControlList, ActionMeasureGet, ActionMeasureList, @@ -124,6 +131,7 @@ var AuditorPolicy = policy.NewPolicy( ActionContinualImprovementList, ActionProcessingActivityList, ActionSnapshotList, + ActionMeetingGet, ActionMeetingList, ActionFileGet, ActionFileDownloadUrl, ).WithSID("entity-read-access"),