feat: global org read (#657)

This commit is contained in:
Fabi 2020-08-28 15:38:46 +02:00 committed by GitHub
parent 2c11c6ae1f
commit 40b8faaddd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
5 changed files with 16604 additions and 15030 deletions

View File

@ -14,6 +14,7 @@ InternalAuthZ:
- "iam.idp.write"
- "iam.idp.delete"
- "org.read"
- "org.global.read"
- "org.create"
- "org.write"
- "org.member.read"
@ -82,6 +83,7 @@ InternalAuthZ:
- Role: 'ORG_OWNER'
Permissions:
- "org.read"
- "org.global.read"
- "org.create"
- "org.write"
- "org.member.read"
@ -183,6 +185,7 @@ InternalAuthZ:
- "project.write"
- Role: 'PROJECT_OWNER'
Permissions:
- "org.global.read"
- "project.read"
- "project.write"
- "project.delete"
@ -221,6 +224,7 @@ InternalAuthZ:
- "user.membership.read"
- Role: 'PROJECT_GRANT_OWNER'
Permissions:
- "org.global.read"
- "project.read"
- "project.grant.read"
- "project.grant.member.read"
@ -232,7 +236,7 @@ InternalAuthZ:
- "user.grant.write"
- "user.grant.delete"
- "user.membership.read"
- Role: 'PROJECT_GRANT_OWNER'
- Role: 'PROJECT_GRANT_OWNER_VIEWER'
Permissions:
- "project.read"
- "project.grant.read"

View File

@ -245,7 +245,7 @@ var ManagementService_AuthMethods = authz.MethodMapping{
},
"/caos.zitadel.management.api.v1.ManagementService/GetOrgByDomainGlobal": authz.Option{
Permission: "org.read",
Permission: "org.global.read",
CheckParam: "",
},

File diff suppressed because it is too large Load Diff

File diff suppressed because it is too large Load Diff

View File

@ -561,7 +561,7 @@ service ManagementService {
};
option (caos.zitadel.utils.v1.auth_option) = {
permission: "org.read"
permission: "org.global.read"
};
}