rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix get identity on organization pending invitation

Browse Source 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
This commit is contained in:
Bryan Frimin
2026-01-02 17:46:04 +01:00
parent 4dc8fbda55
commit c3d4573091
3 changed files with 58 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
pkg/iam/iam_policies.go
View File

@@ -133,6 +133,11 @@ var IAMOwnerPolicy = policy.NewPolicy(
WithSID("full-membership-profile-access").
When(policy.Equals("principal.organization_id", "resource.organization_id")),
// Can view identities of members in the same organization
policy.Allow(ActionIdentityGet).
WithSID("view-member-identity").
When(policy.Equals("principal.organization_id", "resource.organization_id")),
// Can manage invitations (scoped to own organization)
policy.Allow(
ActionInvitationList,
@@ -180,6 +185,11 @@ var IAMAdminPolicy = policy.NewPolicy(
WithSID("membership-profile-admin-access").
When(policy.Equals("principal.organization_id", "resource.organization_id")),
// Can view identities of members in the same organization
policy.Allow(ActionIdentityGet).
WithSID("view-member-identity").
When(policy.Equals("principal.organization_id", "resource.organization_id")),
// Can manage invitations (scoped to own organization)
policy.Allow(
ActionInvitationGet,
@@ -233,5 +243,10 @@ var IAMViewerPolicy = policy.NewPolicy(
policy.Allow(ActionMembershipProfileGet).
WithSID("membership-profile-viewer-access").
When(policy.Equals("principal.organization_id", "resource.organization_id")),
// Can view identities of members in the same organization
policy.Allow(ActionIdentityGet).
WithSID("view-member-identity").
When(policy.Equals("principal.organization_id", "resource.organization_id")),
).
WithDescription("Read-only IAM access for organization viewers")