rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix permission for trust center access

Browse Source 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
This commit is contained in:
Sacha Al Himdani
2025-12-10 18:51:44 +01:00
parent 4f099b1476
commit f0489f7d6f
2 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
pkg/authz/permissions.go
View File

@@ -45,6 +45,7 @@ const (
ActionGetCustomDomain Action = "getCustomDomain"
ActionGetDataPrivacyAgreement Action = "getDataPrivacyAgreement"
ActionGetDocument Action = "getDocument"
ActionGetReport Action = "getReport"
ActionGetFile Action = "getFile"
ActionGetFileUrl Action = "getFileUrl"
ActionGetFramework Action = "getFramework"
@@ -351,6 +352,8 @@ var Permissions = map[uint16]map[Action][]Role{
ActionActiveCount: NonEmployeeRoles,
ActionPendingRequestCount: NonEmployeeRoles,
ActionAvailableDocumentAccesses: NonEmployeeRoles,
ActionGetTrustCenterFile: NonEmployeeRoles,
ActionGetReport: NonEmployeeRoles,
ActionUpdateTrustCenterAccess: EditRoles,
ActionDeleteTrustCenterAccess: EditRoles,

4
pkg/server/api/console/v1/v1_resolver.go
View File

@@ -6516,7 +6516,7 @@ func (r *trustCenterDocumentAccessResolver) Document(ctx context.Context, obj *t
// Report is the resolver for the report field.
func (r *trustCenterDocumentAccessResolver) Report(ctx context.Context, obj *types.TrustCenterDocumentAccess) (*types.Report, error) {
r.MustBeAuthorized(ctx, obj.TrustCenterAccessID, authz.ActionReport)
r.MustBeAuthorized(ctx, obj.TrustCenterAccessID, authz.ActionGetReport)
if obj.ReportID == nil {
return nil, nil
@@ -6534,7 +6534,7 @@ func (r *trustCenterDocumentAccessResolver) Report(ctx context.Context, obj *typ
// TrustCenterFile is the resolver for the trustCenterFile field.
func (r *trustCenterDocumentAccessResolver) TrustCenterFile(ctx context.Context, obj *types.TrustCenterDocumentAccess) (*types.TrustCenterFile, error) {
r.MustBeAuthorized(ctx, obj.TrustCenterAccessID, authz.ActionTrustCenterFile)
r.MustBeAuthorized(ctx, obj.TrustCenterAccessID, authz.ActionGetTrustCenterFile)
if obj.TrustCenterFileID == nil {
return nil, nil