Skip to content

Commit

Permalink
less permissions for viewers
Browse files Browse the repository at this point in the history
  • Loading branch information
n1ru4l committed Jan 17, 2025
1 parent 7f0f3d7 commit d3810a9
Showing 1 changed file with 6 additions and 7 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -223,8 +223,8 @@ function transformOrganizationMemberLegacyScopesIntoPermissionGroup(
switch (scope) {
case OrganizationAccessScope.READ: {
permissions.add('support:manageTickets');
permissions.add('project:create');
permissions.add('project:describe');
permissions.add('project:create');
break;
}
case OrganizationAccessScope.SETTINGS: {
Expand Down Expand Up @@ -334,11 +334,10 @@ const predefinedRolesPermissions = {
/**
* Permissions the viewer role is assigned with (computed from legacy scopes)
**/
viewer: transformOrganizationMemberLegacyScopesIntoPermissionGroup([
OrganizationAccessScope.READ,
ProjectAccessScope.READ,
ProjectAccessScope.OPERATIONS_STORE_READ,
TargetAccessScope.READ,
TargetAccessScope.REGISTRY_READ,
viewer: permissionsToPermissionsPerResourceLevelAssignment([
'support:manageTickets',
'project:describe',
'appDeployment:describe',
'laboratory:describe',
]),
};

0 comments on commit d3810a9

Please sign in to comment.