From 6c2803da9324b484f2215d48fae91c4570d35794 Mon Sep 17 00:00:00 2001
From: Akhil Mohan <akhilmhdh@gmail.com>
Date: Thu, 18 Jan 2024 20:21:02 +0530
Subject: [PATCH] feat(infisical-pg): crct permission for secret approval
 policy check

---
 .../secret-approval-policy/secret-approval-policy-service.ts  | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/backend-pg/src/ee/services/secret-approval-policy/secret-approval-policy-service.ts b/backend-pg/src/ee/services/secret-approval-policy/secret-approval-policy-service.ts
index 4be60390c..d44e9ea0b 100644
--- a/backend-pg/src/ee/services/secret-approval-policy/secret-approval-policy-service.ts
+++ b/backend-pg/src/ee/services/secret-approval-policy/secret-approval-policy-service.ts
@@ -1,4 +1,4 @@
-import { ForbiddenError } from "@casl/ability";
+import { ForbiddenError, subject } from "@casl/ability";
 import picomatch from "picomatch";
 
 import { TPermissionServiceFactory } from "@app/ee/services/permission/permission-service";
@@ -217,7 +217,7 @@ export const secretApprovalPolicyServiceFactory = ({
     const { permission } = await permissionService.getProjectPermission(actor, actorId, projectId);
     ForbiddenError.from(permission).throwUnlessCan(
       ProjectPermissionActions.Read,
-      ProjectPermissionSub.Secrets
+      subject(ProjectPermissionSub.Secrets, { secretPath, environment })
     );
     return getSapPolicy(projectId, environment, secretPath);
   };