From ef89fa81c9df5403706525ecb76cc3967227c609 Mon Sep 17 00:00:00 2001
From: pwnslinger <it.ahmadi.91@gmail.com>
Date: Thu, 20 Nov 2025 01:16:27 -0800
Subject: [PATCH] Fix: Add verifyDomain permission for SAMLConfiguration entity
 Added missing ActionVerifyDomain permission mapping for
 SAMLConfigurationEntityType to fix authorization error when verifying SAML
 domain. Fixes #539

Signed-off-by: pwnslinger <it.ahmadi.91@gmail.com>
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
---
 pkg/authz/permissions.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkg/authz/permissions.go b/pkg/authz/permissions.go
index 06590c873..244b31a73 100644
--- a/pkg/authz/permissions.go
+++ b/pkg/authz/permissions.go
@@ -660,6 +660,7 @@ var Permissions = map[uint16]map[Action][]Role{
 		ActionDeleteSAMLConfiguration: {RoleOwner, RoleAdmin},
 		ActionEnableSAML:              {RoleOwner, RoleAdmin},
 		ActionDisableSAML:             {RoleOwner, RoleAdmin},
+		ActionVerifyDomain:            {RoleOwner},
 	},
 	coredata.FileEntityType: {
 		ActionGet:         AllRoles,