From 0fdf5032f93e6b9ea89c3750174ace635e1c2493 Mon Sep 17 00:00:00 2001
From: Maidul Islam <maidul98@gmail.com>
Date: Tue, 26 Mar 2024 17:50:06 -0400
Subject: [PATCH] allow viewer to create and list dynamic secret

---
 .../dynamic-secret-lease/dynamic-secret-lease-service.ts        | 2 +-
 backend/src/services/dynamic-secret/dynamic-secret-service.ts   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/backend/src/services/dynamic-secret-lease/dynamic-secret-lease-service.ts b/backend/src/services/dynamic-secret-lease/dynamic-secret-lease-service.ts
index ecddcd04a..99358175f 100644
--- a/backend/src/services/dynamic-secret-lease/dynamic-secret-lease-service.ts
+++ b/backend/src/services/dynamic-secret-lease/dynamic-secret-lease-service.ts
@@ -71,7 +71,7 @@ export const dynamicSecretLeaseServiceFactory = ({
       actorOrgId
     );
     ForbiddenError.from(permission).throwUnlessCan(
-      ProjectPermissionActions.Create,
+      ProjectPermissionActions.Read,
       subject(ProjectPermissionSub.Secrets, { environment: environmentSlug, secretPath: path })
     );
 
diff --git a/backend/src/services/dynamic-secret/dynamic-secret-service.ts b/backend/src/services/dynamic-secret/dynamic-secret-service.ts
index 48d203ff2..a8064659a 100644
--- a/backend/src/services/dynamic-secret/dynamic-secret-service.ts
+++ b/backend/src/services/dynamic-secret/dynamic-secret-service.ts
@@ -320,7 +320,7 @@ export const dynamicSecretServiceFactory = ({
       actorOrgId
     );
     ForbiddenError.from(permission).throwUnlessCan(
-      ProjectPermissionActions.Edit,
+      ProjectPermissionActions.Read,
       subject(ProjectPermissionSub.Secrets, { environment: environmentSlug, secretPath: path })
     );