awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-04 20:26:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: fixed missing secret folder and import permission in service token

Browse Source
This commit is contained in:
=
2024-10-31 01:17:41 +05:30
parent ce0bc191d8
commit 64f43e59d0
1 changed files with 29 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/ee/services/permission/project-permission.ts
+29 -25
View File
@@ -694,31 +694,35 @@ export const buildServiceTokenProjectPermission = (
const canRead = permission.includes("read"); const canRead = permission.includes("read");
const { can, build } = new AbilityBuilder<MongoAbility<ProjectPermissionSet>>(createMongoAbility); const { can, build } = new AbilityBuilder<MongoAbility<ProjectPermissionSet>>(createMongoAbility);
scopes.forEach(({ secretPath, environment }) => { scopes.forEach(({ secretPath, environment }) => {
if (canWrite) { [ProjectPermissionSub.Secrets, ProjectPermissionSub.SecretImports, ProjectPermissionSub.SecretFolders].forEach(
// TODO: @Akhi (subject) => {
// @ts-expect-error type if (canWrite) {
can(ProjectPermissionActions.Edit, ProjectPermissionSub.Secrets, { // TODO: @Akhi
secretPath: { $glob: secretPath }, // @ts-expect-error type
environment can(ProjectPermissionActions.Edit, subject, {
}); secretPath: { $glob: secretPath },
// @ts-expect-error type environment
can(ProjectPermissionActions.Create, ProjectPermissionSub.Secrets, { });
secretPath: { $glob: secretPath }, // @ts-expect-error type
environment can(ProjectPermissionActions.Create, subject, {
}); secretPath: { $glob: secretPath },
// @ts-expect-error type environment
can(ProjectPermissionActions.Delete, ProjectPermissionSub.Secrets, { });
secretPath: { $glob: secretPath }, // @ts-expect-error type
environment can(ProjectPermissionActions.Delete, subject, {
}); secretPath: { $glob: secretPath },
} environment
if (canRead) { });
// @ts-expect-error type }
can(ProjectPermissionActions.Read, ProjectPermissionSub.Secrets, { if (canRead) {
secretPath: { $glob: secretPath }, // @ts-expect-error type
environment can(ProjectPermissionActions.Read, subject, {
}); secretPath: { $glob: secretPath },
} environment
});
}
}
);
}); });
return build({ conditionsMatcher }); return build({ conditionsMatcher });