fix permissions

petercrocker · petercrocker · commit 3b5347394f24 · 2025-11-25T17:14:36.000Z
diff --git a/scripts/create_users_roles.py b/scripts/create_users_roles.py
@@ -473,6 +473,7 @@ async def create_roles(client: InfrahubClient) -> dict[str, str]:
         "schema-reviewer-role": [
             "global:manage_schema:allow_all",  # Can manage schema definitions
             "global:review_proposed_change:allow_all",  # Can review/approve PCs
+            "global:edit_default_branch:allow_all",  # Needed for PC approvals
             "object:*:*:any:allow_all",  # Full access to all objects (CRUD)
         ],
     }

Original file line number	Diff line number	Diff line change
`@@ -473,6 +473,7 @@ async def create_roles(client: InfrahubClient) -> dict[str, str]:`
`473`	`473`	`"schema-reviewer-role": [`
`474`	`474`	`"global:manage_schema:allow_all", # Can manage schema definitions`
`475`	`475`	`"global:review_proposed_change:allow_all", # Can review/approve PCs`
	`476`	`+ "global:edit_default_branch:allow_all", # Needed for PC approvals`
`476`	`477`	`"object:::any:allow_all", # Full access to all objects (CRUD)`
`477`	`478`	`],`
`478`	`479`	`}`