From f0489f7d6ffeae38844ea8cecc86d0d0255e8264 Mon Sep 17 00:00:00 2001 From: Sacha Al Himdani Date: Wed, 10 Dec 2025 18:51:44 +0100 Subject: [PATCH] Fix permission for trust center access Signed-off-by: Sacha Al Himdani --- pkg/authz/permissions.go | 3 +++ pkg/server/api/console/v1/v1_resolver.go | 4 ++-- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/pkg/authz/permissions.go b/pkg/authz/permissions.go index ed34e90e0..39da9e698 100644 --- a/pkg/authz/permissions.go +++ b/pkg/authz/permissions.go @@ -45,6 +45,7 @@ const ( ActionGetCustomDomain Action = "getCustomDomain" ActionGetDataPrivacyAgreement Action = "getDataPrivacyAgreement" ActionGetDocument Action = "getDocument" + ActionGetReport Action = "getReport" ActionGetFile Action = "getFile" ActionGetFileUrl Action = "getFileUrl" ActionGetFramework Action = "getFramework" @@ -351,6 +352,8 @@ var Permissions = map[uint16]map[Action][]Role{ ActionActiveCount: NonEmployeeRoles, ActionPendingRequestCount: NonEmployeeRoles, ActionAvailableDocumentAccesses: NonEmployeeRoles, + ActionGetTrustCenterFile: NonEmployeeRoles, + ActionGetReport: NonEmployeeRoles, ActionUpdateTrustCenterAccess: EditRoles, ActionDeleteTrustCenterAccess: EditRoles, diff --git a/pkg/server/api/console/v1/v1_resolver.go b/pkg/server/api/console/v1/v1_resolver.go index 019e9c6fc..c78a096a6 100644 --- a/pkg/server/api/console/v1/v1_resolver.go +++ b/pkg/server/api/console/v1/v1_resolver.go @@ -6516,7 +6516,7 @@ func (r *trustCenterDocumentAccessResolver) Document(ctx context.Context, obj *t // Report is the resolver for the report field. func (r *trustCenterDocumentAccessResolver) Report(ctx context.Context, obj *types.TrustCenterDocumentAccess) (*types.Report, error) { - r.MustBeAuthorized(ctx, obj.TrustCenterAccessID, authz.ActionReport) + r.MustBeAuthorized(ctx, obj.TrustCenterAccessID, authz.ActionGetReport) if obj.ReportID == nil { return nil, nil @@ -6534,7 +6534,7 @@ func (r *trustCenterDocumentAccessResolver) Report(ctx context.Context, obj *typ // TrustCenterFile is the resolver for the trustCenterFile field. func (r *trustCenterDocumentAccessResolver) TrustCenterFile(ctx context.Context, obj *types.TrustCenterDocumentAccess) (*types.TrustCenterFile, error) { - r.MustBeAuthorized(ctx, obj.TrustCenterAccessID, authz.ActionTrustCenterFile) + r.MustBeAuthorized(ctx, obj.TrustCenterAccessID, authz.ActionGetTrustCenterFile) if obj.TrustCenterFileID == nil { return nil, nil