rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix compliance page permission

Browse Source 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
This commit is contained in:
Bryan Frimin
2025-11-27 17:51:25 +01:00
parent b429be0413
commit ce40c6d833
3 changed files with 24 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
pkg/authz/permissions.go
View File

@@ -282,6 +282,7 @@ var Permissions = map[uint16]map[Action][]Role{
ActionListSnapshots: AllRoles, ActionListSnapshots: AllRoles,
ActionListTrustCenterFiles: AllRoles, ActionListTrustCenterFiles: AllRoles,
ActionGetTrustCenter: AllRoles, ActionGetTrustCenter: AllRoles,
ActionAudit: AllRoles,
ActionGetCustomDomain: AllRoles, ActionGetCustomDomain: AllRoles,
ActionListSAMLConfigurations: AllRoles, ActionListSAMLConfigurations: AllRoles,
ActionConfirmEmail: AllRoles, ActionConfirmEmail: AllRoles,
@@ -341,6 +342,9 @@ var Permissions = map[uint16]map[Action][]Role{
ActionActiveCount: AllRoles, ActionActiveCount: AllRoles,
ActionPendingRequestCount: AllRoles, ActionPendingRequestCount: AllRoles,
ActionAvailableDocumentAccesses: AllRoles, ActionAvailableDocumentAccesses: AllRoles,
ActionDocument: AllRoles,
ActionReport: AllRoles,
ActionTrustCenterFile: AllRoles,
ActionUpdateTrustCenterAccess: EditRoles, ActionUpdateTrustCenterAccess: EditRoles,
ActionDeleteTrustCenterAccess: EditRoles, ActionDeleteTrustCenterAccess: EditRoles,

26
pkg/server/api/console/v1/types/trust_center_document_access.go
View File

@@ -47,23 +47,25 @@ type (
TrustCenterFile *TrustCenterFile `json:"trustCenterFile,omitempty"` TrustCenterFile *TrustCenterFile `json:"trustCenterFile,omitempty"`
// Internal fields used by resolvers // Internal fields used by resolvers
DocumentID *gid.GID `json:"-"` TrustCenterAccessID gid.GID `json:"-"`
ReportID *gid.GID `json:"-"` DocumentID *gid.GID `json:"-"`
TrustCenterFileID *gid.GID `json:"-"` ReportID *gid.GID `json:"-"`
TrustCenterFileID *gid.GID `json:"-"`
} }
) )
func NewTrustCenterDocumentAccess(tcda *coredata.TrustCenterDocumentAccess) *TrustCenterDocumentAccess { func NewTrustCenterDocumentAccess(tcda *coredata.TrustCenterDocumentAccess) *TrustCenterDocumentAccess {
return &TrustCenterDocumentAccess{ return &TrustCenterDocumentAccess{
ID: tcda.ID, ID: tcda.ID,
OrganizationID: tcda.OrganizationID, OrganizationID: tcda.OrganizationID,
Active: tcda.Active, Active: tcda.Active,
Requested: tcda.Requested, Requested: tcda.Requested,
CreatedAt: tcda.CreatedAt, CreatedAt: tcda.CreatedAt,
UpdatedAt: tcda.UpdatedAt, UpdatedAt: tcda.UpdatedAt,
DocumentID: tcda.DocumentID, TrustCenterAccessID: tcda.TrustCenterAccessID,
ReportID: tcda.ReportID, DocumentID: tcda.DocumentID,
TrustCenterFileID: tcda.TrustCenterFileID, ReportID: tcda.ReportID,
TrustCenterFileID: tcda.TrustCenterFileID,
} }
} }

12
pkg/server/api/console/v1/v1_resolver.go
View File

@@ -6349,13 +6349,13 @@ func (r *trustCenterAccessResolver) AvailableDocumentAccesses(ctx context.Contex
// Document is the resolver for the document field. // Document is the resolver for the document field.
func (r *trustCenterDocumentAccessResolver) Document(ctx context.Context, obj *types.TrustCenterDocumentAccess) (*types.Document, error) { func (r *trustCenterDocumentAccessResolver) Document(ctx context.Context, obj *types.TrustCenterDocumentAccess) (*types.Document, error) {
r.MustBeAuthorized(ctx, obj.ID, authz.ActionDocument) r.MustBeAuthorized(ctx, obj.TrustCenterAccessID, authz.ActionDocument)
if obj.DocumentID == nil { if obj.DocumentID == nil {
return nil, nil return nil, nil
} }
prb := r.ProboService(ctx, obj.ID.TenantID()) prb := r.ProboService(ctx, obj.TrustCenterAccessID.TenantID())
document, err := prb.Documents.Get(ctx, *obj.DocumentID) document, err := prb.Documents.Get(ctx, *obj.DocumentID)
if err != nil { if err != nil {
@@ -6371,13 +6371,13 @@ func (r *trustCenterDocumentAccessResolver) Document(ctx context.Context, obj *t
// Report is the resolver for the report field. // Report is the resolver for the report field.
func (r *trustCenterDocumentAccessResolver) Report(ctx context.Context, obj *types.TrustCenterDocumentAccess) (*types.Report, error) { func (r *trustCenterDocumentAccessResolver) Report(ctx context.Context, obj *types.TrustCenterDocumentAccess) (*types.Report, error) {
r.MustBeAuthorized(ctx, obj.ID, authz.ActionReport) r.MustBeAuthorized(ctx, obj.TrustCenterAccessID, authz.ActionReport)
if obj.ReportID == nil { if obj.ReportID == nil {
return nil, nil return nil, nil
} }
prb := r.ProboService(ctx, obj.ID.TenantID()) prb := r.ProboService(ctx, obj.TrustCenterAccessID.TenantID())
report, err := prb.Reports.Get(ctx, *obj.ReportID) report, err := prb.Reports.Get(ctx, *obj.ReportID)
if err != nil { if err != nil {
@@ -6389,13 +6389,13 @@ func (r *trustCenterDocumentAccessResolver) Report(ctx context.Context, obj *typ
// TrustCenterFile is the resolver for the trustCenterFile field. // TrustCenterFile is the resolver for the trustCenterFile field.
func (r *trustCenterDocumentAccessResolver) TrustCenterFile(ctx context.Context, obj *types.TrustCenterDocumentAccess) (*types.TrustCenterFile, error) { func (r *trustCenterDocumentAccessResolver) TrustCenterFile(ctx context.Context, obj *types.TrustCenterDocumentAccess) (*types.TrustCenterFile, error) {
r.MustBeAuthorized(ctx, obj.ID, authz.ActionTrustCenterFile) r.MustBeAuthorized(ctx, obj.TrustCenterAccessID, authz.ActionTrustCenterFile)
if obj.TrustCenterFileID == nil { if obj.TrustCenterFileID == nil {
return nil, nil return nil, nil
} }
prb := r.ProboService(ctx, obj.ID.TenantID()) prb := r.ProboService(ctx, obj.TrustCenterAccessID.TenantID())
trustCenterFile, err := prb.TrustCenterFiles.Get(ctx, *obj.TrustCenterFileID) trustCenterFile, err := prb.TrustCenterFiles.Get(ctx, *obj.TrustCenterFileID)
if err != nil { if err != nil {