awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-08 13:28:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2665 from akhilmhdh/fix/resolve-service-token

Browse Source 
feat: fixed missing secret folder and import permission in service token
This commit is contained in:
Maidul Islam
2024-10-30 15:50:59 -04:00
committed by GitHub
parent ccaf4c00af 64f43e59d0
commit 332ca61f5d
1 changed files with 29 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/ee/services/permission/project-permission.ts
+8 -4
View File
@@ -694,31 +694,35 @@ export const buildServiceTokenProjectPermission = (
const canRead = permission.includes("read"); const canRead = permission.includes("read");
const { can, build } = new AbilityBuilder<MongoAbility<ProjectPermissionSet>>(createMongoAbility); const { can, build } = new AbilityBuilder<MongoAbility<ProjectPermissionSet>>(createMongoAbility);
scopes.forEach(({ secretPath, environment }) => { scopes.forEach(({ secretPath, environment }) => {
[ProjectPermissionSub.Secrets, ProjectPermissionSub.SecretImports, ProjectPermissionSub.SecretFolders].forEach(
(subject) => {
if (canWrite) { if (canWrite) {
// TODO: @Akhi // TODO: @Akhi
// @ts-expect-error type // @ts-expect-error type
can(ProjectPermissionActions.Edit, ProjectPermissionSub.Secrets, { can(ProjectPermissionActions.Edit, subject, {
secretPath: { $glob: secretPath }, secretPath: { $glob: secretPath },
environment environment
}); });
// @ts-expect-error type // @ts-expect-error type
can(ProjectPermissionActions.Create, ProjectPermissionSub.Secrets, { can(ProjectPermissionActions.Create, subject, {
secretPath: { $glob: secretPath }, secretPath: { $glob: secretPath },
environment environment
}); });
// @ts-expect-error type // @ts-expect-error type
can(ProjectPermissionActions.Delete, ProjectPermissionSub.Secrets, { can(ProjectPermissionActions.Delete, subject, {
secretPath: { $glob: secretPath }, secretPath: { $glob: secretPath },
environment environment
}); });
} }
if (canRead) { if (canRead) {
// @ts-expect-error type // @ts-expect-error type
can(ProjectPermissionActions.Read, ProjectPermissionSub.Secrets, { can(ProjectPermissionActions.Read, subject, {
secretPath: { $glob: secretPath }, secretPath: { $glob: secretPath },
environment environment
}); });
} }
}
);
}); });
return build({ conditionsMatcher }); return build({ conditionsMatcher });