May 6, 2022 · May 4, 2022 · May 4, 2022 · May 5, 2022 · May 5, 2022 · May 5, 2022
diff --git a/coderd/coderd.go b/coderd/coderd.go
 r.Get("/", api.userByName)
 r.Put("/profile", api.putUserProfile)
 r.Put("/suspend", api.putUserSuspend)
 r.Put("/password", api.putUserPassword)
 r.Route("/password", func(r chi.Router) {
 r.Use(httpmw.WithRBACObject(rbac.ResourceUserPasswordRole))
 r.Put("/password", authorize(api.putUserPassword, rbac.ActionUpdate))
 })
 r.Get("/organizations", api.organizationsByUser)
 r.Post("/organizations", api.postOrganizationsByUser)
 // These roles apply to the site wide permissions.
diff --git a/coderd/rbac/object.go b/coderd/rbac/object.go
 Type: "user_role",
 }

 ResourceUserPasswordRole = Object{
 Type: "user_password",
 }

 // ResourceWildcard represents all resource types
 ResourceWildcard = Object{
 Type: WildcardSymbol,
Original file line number	Diff line number	Diff line change
Expand Up		@@ -240,7 +240,10 @@ func New(options *Options) (http.Handler, func()) {
		r.Get("/", api.userByName)
		r.Put("/profile", api.putUserProfile)
		r.Put("/suspend", api.putUserSuspend)
		r.Put("/password", api.putUserPassword)
		r.Route("/password", func(r chi.Router) {
		r.Use(httpmw.WithRBACObject(rbac.ResourceUserPasswordRole))
		r.Put("/password", authorize(api.putUserPassword, rbac.ActionUpdate))
		})
		r.Get("/organizations", api.organizationsByUser)
		r.Post("/organizations", api.postOrganizationsByUser)
		// These roles apply to the site wide permissions.
Expand Down
Original file line number	Diff line number	Diff line change
Expand Up		@@ -24,6 +24,10 @@ var (
		Type: "user_role",
		}

		ResourceUserPasswordRole = Object{
		Type: "user_password",
		}

		// ResourceWildcard represents all resource types
		ResourceWildcard = Object{
		Type: WildcardSymbol,
Expand Down