rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix iam pages permissions handling

Browse Source 
Signed-off-by: Émile Ré <nemile.re@gmail.com>
This commit is contained in:
Émile Ré
2025-12-30 18:33:18 +01:00
committed by Bryan Frimin
parent ca533ce7a7
commit e46a11001a
26 changed files with 1848 additions and 1686 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
pkg/iam/iam_actions.go
View File

@@ -43,6 +43,7 @@ const (
ActionIAMSessionRevokeAll = "iam:session:revoke-all"
// Invitation actions
ActionIAMInvitationCreate = "iam:invitation:create"
ActionIAMInvitationGet = "iam:invitation:get"
ActionIAMInvitationAccept = "iam:invitation:accept"
ActionIAMInvitationDelete = "iam:invitation:delete"
@@ -56,6 +57,7 @@ const (
// Personal API Key actions
ActionIAMPersonalAPIKeyCreate = "iam:personal-api-key:create"
ActionIAMPersonalAPIKeyGet = "iam:personal-api-key:get"
ActionIAMPersonalAPIKeyList = "iam:personal-api-key:list"
ActionIAMPersonalAPIKeyUpdate = "iam:personal-api-key:update"
ActionIAMPersonalAPIKeyDelete = "iam:personal-api-key:delete"

3
pkg/iam/iam_policies.go
View File

@@ -39,7 +39,7 @@ var IAMSelfManageIdentityPolicy = policy.NewPolicy(
ActionIAMIdentityListMemberships,
ActionIAMIdentityListInvitations,
ActionIAMIdentityListSessions,
ActionIAMIdentityListPersonalAPIKeys,
ActionIAMPersonalAPIKeyList,
).WithSID("list-own-associations").
When(policy.Equals("principal.id", "resource.id")),
).WithDescription("Allows users to manage their own identity, sessions, API keys, and view their memberships")
@@ -104,6 +104,7 @@ var IAMOwnerPolicy = policy.NewPolicy(
policy.Allow("iam:membership:*").WithSID("full-membership-access"),
// Can manage invitations
policy.Allow(
ActionIAMInvitationCreate,
ActionIAMInvitationGet,
ActionIAMInvitationDelete,
).WithSID("manage-invitations"),