Skip to content

Commit dd1fe1d

Browse files
committed
fix(model-server): make modelix-admin also model-server admin
When a user is assigned the role modelix-admin in keycloak then he should have admin permissions on the model-server.
1 parent 71dc994 commit dd1fe1d

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

model-server/src/main/kotlin/org/modelix/model/server/ModelServerPermissionSchema.kt

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
package org.modelix.model.server
22

33
import org.modelix.authorization.permissions.PermissionParts
4+
import org.modelix.authorization.permissions.PermissionSchemaBase
45
import org.modelix.authorization.permissions.buildPermissionSchema
56
import org.modelix.model.lazy.BranchReference
67
import org.modelix.model.lazy.RepositoryId
@@ -29,7 +30,9 @@ object ModelServerPermissionSchema {
2930

3031
val SCHEMA = buildPermissionSchema {
3132
resource(MODEL_SERVER) {
32-
permission(ADMIN)
33+
permission(ADMIN) {
34+
includedIn(PermissionSchemaBase.cluster.admin.parts[0], PermissionSchemaBase.cluster.admin.parts[1])
35+
}
3336
}
3437

3538
resource(PERMISSION_SCHEMA) {

0 commit comments

Comments
 (0)