Commit4208c30

authored

fix(coderd/rbac): allow user admin all perms on ResourceUserData (#10556)

1 parentf84485d commit4208c30Copy full SHA for 4208c30

File tree

-2

lines changed

-2

lines changed

Lines changed: 1 addition & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -206,6 +206,7 @@ func ReloadBuiltinRoles(opts *RoleOptions) {`
`206`	`206`	`Site:Permissions(map[string][]Action{`
`207`	`207`	`ResourceRoleAssignment.Type: {ActionCreate,ActionRead,ActionUpdate,ActionDelete},`
`208`	`208`	`ResourceUser.Type: {ActionCreate,ActionRead,ActionUpdate,ActionDelete},`
	`209`	`+ResourceUserData.Type: {ActionCreate,ActionRead,ActionUpdate,ActionDelete},`
`209`	`210`	`// Full perms to manage org members`
`210`	`211`	`ResourceOrganizationMember.Type: {ActionCreate,ActionRead,ActionUpdate,ActionDelete},`
`211`	`212`	`ResourceGroup.Type: {ActionCreate,ActionRead,ActionUpdate,ActionDelete},`

Lines changed: 2 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -274,8 +274,8 @@ func TestRolePermissions(t *testing.T) {`
`274`	`274`	`Actions: []rbac.Action{rbac.ActionCreate,rbac.ActionRead,rbac.ActionUpdate,rbac.ActionDelete},`
`275`	`275`	`Resource:rbac.ResourceUserData.WithID(currentUser).WithOwner(currentUser.String()),`
`276`	`276`	`AuthorizeMap:map[bool][]authSubject{`
`277`		`-true: {owner,orgMemberMe,memberMe},`
`278`		`-false: {orgAdmin,otherOrgAdmin,otherOrgMember,templateAdmin,userAdmin},`
	`277`	`+true: {owner,orgMemberMe,memberMe,userAdmin},`
	`278`	`+false: {orgAdmin,otherOrgAdmin,otherOrgMember,templateAdmin},`
`279`	`279`	`},`
`280`	`280`	`},`
`281`	`281`	`{`

Comments

(0)