awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 15:27:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: legacy permission check

Browse Source
This commit is contained in:
Daniel Hougaard
2025-03-11 00:08:59 +04:00
parent f1ba64aa66
commit 955657e172
1 changed files with 6 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/services/secret-v2-bridge/secret-v2-bridge-service.ts
+6 -9
View File
@@ -1127,15 +1127,12 @@ export const secretV2BridgeServiceFactory = ({
actionProjectType: ActionProjectType.SecretManager actionProjectType: ActionProjectType.SecretManager
}); });
ForbiddenError.from(permission).throwUnlessCan( CheckForbiddenErrorSecretsSubject(permission, ProjectPermissionSecretActions.ReadValue, {
ProjectPermissionActions.Read, environment: folderWithPath.environmentSlug,
subject(ProjectPermissionSub.Secrets, { secretPath: folderWithPath.path,
environment: folderWithPath.environmentSlug, secretName: secret.key,
secretPath: folderWithPath.path, secretTags: secret.tags.map((i) => i.slug)
secretName: secret.key, });
secretTags: secret.tags.map((i) => i.slug)
})
);
if (secret.type === SecretType.Personal && secret.userId !== actorId) { if (secret.type === SecretType.Personal && secret.userId !== actorId) {
throw new ForbiddenRequestError({ throw new ForbiddenRequestError({