Commit6b645d6

committed

fix permissions

1 parentfb8c284 commit6b645d6Copy full SHA for 6b645d6

File tree

-2

lines changed

coderd
- database/dbauthz
  - dbauthz.go
- provisionerdserver
  - provisionerdserver.go

-2

lines changed

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -171,7 +171,7 @@ var (`
`171`	`171`	`DisplayName:"Provisioner Daemon",`
`172`	`172`	`Site:rbac.Permissions(map[string][]policy.Action{`
`173`	`173`	`rbac.ResourceProvisionerJobs.Type: {policy.ActionRead,policy.ActionUpdate,policy.ActionCreate},`
`174`		`-rbac.ResourceFile.Type: {policy.ActionRead},`
	`174`	`+rbac.ResourceFile.Type: {policy.ActionCreate,policy.ActionRead},`
`175`	`175`	`rbac.ResourceSystem.Type: {policy.WildcardSymbol},`
`176`	`176`	`rbac.ResourceTemplate.Type: {policy.ActionRead,policy.ActionUpdate},`
`177`	`177`	`// Unsure why provisionerd needs update and read personal`

Lines changed: 2 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -1392,7 +1392,8 @@ UploadFileStream:`
`1392`	`1392`	`returnxerrors.Errorf("unsupported file upload type: %s",file.Type)`
`1393`	`1393`	`}`
`1394`	`1394`
`1395`		`-_,err=s.Database.InsertFile(s.lifecycleCtx,insert)`
	`1395`	`+//nolint:gocritic // Provisionerd actor`
	`1396`	`+_,err=s.Database.InsertFile(dbauthz.AsProvisionerd(s.lifecycleCtx),insert)`
`1396`	`1397`	`iferr!=nil {`
`1397`	`1398`	`// Duplicated files already exist in the database, so we can ignore this error.`
`1398`	`1399`	`if!database.IsUniqueViolation(err,database.UniqueFilesHashCreatedByKey) {`

Comments

(0)