awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-06 16:27:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(infisical-pg): crct permission for secret approval policy check

Browse Source
This commit is contained in:
Akhil Mohan
2024-01-27 12:38:23 +05:30
parent 4031f4a559
commit 6c2803da93
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend-pg/src/ee/services/secret-approval-policy/secret-approval-policy-service.ts
+2 -2
View File
@@ -1,4 +1,4 @@
import { ForbiddenError } from "@casl/ability"; import { ForbiddenError, subject } from "@casl/ability";
import picomatch from "picomatch"; import picomatch from "picomatch";
import { TPermissionServiceFactory } from "@app/ee/services/permission/permission-service"; import { TPermissionServiceFactory } from "@app/ee/services/permission/permission-service";
@@ -217,7 +217,7 @@ export const secretApprovalPolicyServiceFactory = ({
const { permission } = await permissionService.getProjectPermission(actor, actorId, projectId); const { permission } = await permissionService.getProjectPermission(actor, actorId, projectId);
ForbiddenError.from(permission).throwUnlessCan( ForbiddenError.from(permission).throwUnlessCan(
ProjectPermissionActions.Read, ProjectPermissionActions.Read,
ProjectPermissionSub.Secrets subject(ProjectPermissionSub.Secrets, { secretPath, environment })
); );
return getSapPolicy(projectId, environment, secretPath); return getSapPolicy(projectId, environment, secretPath);
}; };