rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove people related authz actions

Browse Source 
Signed-off-by: Émile Ré <emile@getprobo.com>
This commit is contained in:
Émile Ré
2026-02-05 17:13:13 +04:00
parent adfef480c3
commit ce0952e4ec
5 changed files with 29 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
pkg/iam/iam_actions.go
View File

@@ -52,7 +52,8 @@ const (
ActionMembershipRoleSetOwner = "iam:membership-role:set-owner"
// Membership Profile actions
ActionMembershipProfileGet = "iam:membership-profile:get"
ActionMembershipProfileGet = "iam:membership-profile:get"
ActionMembershipProfileList = "iam:membership-profile:list"
// Personal API Key actions
ActionPersonalAPIKeyCreate = "iam:personal-api-key:create"

15
pkg/iam/iam_policies.go
View File

@@ -146,7 +146,10 @@ var IAMOwnerPolicy = policy.NewPolicy(
When(policy.Equals("principal.organization_id", "resource.organization_id")),
// Full access to membership profiles (scoped to own organization)
policy.Allow(ActionMembershipProfileGet).
policy.Allow(
ActionMembershipProfileGet,
ActionMembershipProfileList,
).
WithSID("full-membership-profile-access").
When(policy.Equals("principal.organization_id", "resource.organization_id")),
@@ -221,7 +224,10 @@ var IAMAdminPolicy = policy.NewPolicy(
),
// Can view membership profiles (scoped to own organization)
policy.Allow(ActionMembershipProfileGet).
policy.Allow(
ActionMembershipProfileGet,
ActionMembershipProfileList,
).
WithSID("membership-profile-admin-access").
When(policy.Equals("principal.organization_id", "resource.organization_id")),
@@ -297,7 +303,10 @@ var IAMViewerPolicy = policy.NewPolicy(
When(policy.Equals("principal.organization_id", "resource.organization_id")),
// Can view membership profiles (scoped to own organization)
policy.Allow(ActionMembershipProfileGet).
policy.Allow(
ActionMembershipProfileGet,
ActionMembershipProfileList,
).
WithSID("membership-profile-viewer-access").
When(policy.Equals("principal.organization_id", "resource.organization_id")),