From 6e6a093300e5fd487e17fd75625ec0482e714e78 Mon Sep 17 00:00:00 2001 From: Ludovic Vielle Date: Fri, 19 Jun 2026 10:04:56 +0200 Subject: [PATCH] Add v1:iam:read scope to auditor mode Signed-off-by: Ludovic Vielle --- pkg/coredata/migrations/20260619T080348Z.sql | 30 ++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 pkg/coredata/migrations/20260619T080348Z.sql diff --git a/pkg/coredata/migrations/20260619T080348Z.sql b/pkg/coredata/migrations/20260619T080348Z.sql new file mode 100644 index 000000000..1e62c0bfe --- /dev/null +++ b/pkg/coredata/migrations/20260619T080348Z.sql @@ -0,0 +1,30 @@ +-- Copyright (c) 2026 Probo Inc . +-- +-- Permission to use, copy, modify, and/or distribute this software for any +-- purpose with or without fee is hereby granted, provided that the above +-- copyright notice and this permission notice appear in all copies. +-- +-- THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH +-- REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY +-- AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, +-- INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM +-- LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR +-- OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR +-- PERFORMANCE OF THIS SOFTWARE. + +-- Well-known OAuth2 client for Auditor Mode (prbaud). +-- Read scopes plus v1:control for measure mutations. Keep in sync with +-- Constants.OAuth2.scopes in the Auditor Mode macOS app. +UPDATE iam_oauth2_clients +SET scopes = '{ + openid, + profile, + email, + offline_access, + v1:control:read, + v1:iam:read, + v1:org:read, + v1:control +}'::TEXT[], + updated_at = NOW() +WHERE id = 'AAAAAAAAAAAASwAAAAAAAAAAcHJiYXVk';