Update policies def

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
This commit is contained in:
Bryan Frimin
2025-12-23 09:46:07 +01:00
parent cc964ecc91
commit 6291402fb8

View File

@@ -49,7 +49,10 @@ var ViewerPolicy = policy.NewPolicy(
// Entity read actions // Entity read actions
policy.Allow( policy.Allow(
ActionPeopleGet, ActionPeopleList, ActionPeopleGet, ActionPeopleList,
ActionVendorList, ActionVendorGet, ActionVendorList,
ActionVendorContactGet,
ActionVendorServiceGet,
ActionVendorComplianceReportGet,
ActionFrameworkGet, ActionFrameworkList, ActionFrameworkGet, ActionFrameworkList,
ActionControlList, ActionControlList,
ActionMeasureGet, ActionMeasureList, ActionMeasureGet, ActionMeasureList,
@@ -68,7 +71,7 @@ var ViewerPolicy = policy.NewPolicy(
ActionContinualImprovementList, ActionContinualImprovementList,
ActionProcessingActivityList, ActionProcessingActivityList,
ActionSnapshotList, ActionSnapshotList,
ActionMeetingList, ActionMeetingGet, ActionMeetingList,
ActionFileGet, ActionFileDownloadUrl, ActionFileGet, ActionFileDownloadUrl,
ActionSlackConnectionList, ActionSlackConnectionList,
).WithSID("entity-read-access"), ).WithSID("entity-read-access"),
@@ -76,6 +79,7 @@ var ViewerPolicy = policy.NewPolicy(
// TrustCenter read actions // TrustCenter read actions
policy.Allow( policy.Allow(
ActionTrustCenterGet, ActionTrustCenterGet,
ActionTrustCenterAccessGet,
ActionTrustCenterFileGet, ActionTrustCenterFileList, ActionTrustCenterFileGet, ActionTrustCenterFileList,
).WithSID("trust-center-read-access"), ).WithSID("trust-center-read-access"),
@@ -106,7 +110,10 @@ var AuditorPolicy = policy.NewPolicy(
// Entity read access (same as viewer) // Entity read access (same as viewer)
policy.Allow( policy.Allow(
ActionPeopleGet, ActionPeopleList, ActionPeopleGet, ActionPeopleList,
ActionVendorList, ActionVendorGet, ActionVendorList,
ActionVendorContactGet,
ActionVendorServiceGet,
ActionVendorComplianceReportGet,
ActionFrameworkGet, ActionFrameworkList, ActionFrameworkGet, ActionFrameworkList,
ActionControlList, ActionControlList,
ActionMeasureGet, ActionMeasureList, ActionMeasureGet, ActionMeasureList,
@@ -124,6 +131,7 @@ var AuditorPolicy = policy.NewPolicy(
ActionContinualImprovementList, ActionContinualImprovementList,
ActionProcessingActivityList, ActionProcessingActivityList,
ActionSnapshotList, ActionSnapshotList,
ActionMeetingGet, ActionMeetingList,
ActionFileGet, ActionFileDownloadUrl, ActionFileGet, ActionFileDownloadUrl,
).WithSID("entity-read-access"), ).WithSID("entity-read-access"),