fix(rbac): add missing service accounts permissions

Author: skipi

front/lib/front_web/templates/people/organization.html.eex

@@ -44,6 +44,6 @@
   <% end %>
 
   <%= if FeatureProvider.feature_enabled?(:service_accounts, param: @org_id) and @permissions["organization.service_accounts.view"] do %>
-      <div id="service-accounts" data-config="<%= Poison.encode!(service_accounts_config(@conn)) %>"></div>
+    <div id="service-accounts" data-config="<%= Poison.encode!(service_accounts_config(@conn)) %>"></div>
   <% end %>
 </div>

rbac/ce/lib/rbac/permissions.ex

@@ -158,6 +158,16 @@ defmodule Rbac.Permissions do
         name: "organization.instance_git_integration.manage",
         description: "Manage the instance Git integration settings."
       },
+      %{
+        id: "c530356b-c90e-473f-97b5-ea4538f95365",
+        name: "organization.service_accounts.view",
+        description: "View service accounts within the organization."
+      },
+      %{
+        id: "c530356b-c90e-473f-97b5-ea4538f95366",
+        name: "organization.service_accounts.manage",
+        description: "Manage service accounts within the organization."
+      },
       %{
         id: "bcaf879d-987f-42d7-9c89-f10911db6041",
         name: "project.view",

rbac/ce/lib/rbac/roles/admin.ex

@@ -27,6 +27,8 @@ defmodule Rbac.Roles.Admin do
         "organization.secrets.view",
         "organization.self_hosted_agents.manage",
         "organization.self_hosted_agents.view",
+        "organization.service_accounts.view",
+        "organization.service_accounts.manage",
         "organization.view",
         "project.access.manage",
         "project.access.view",

rbac/ce/lib/rbac/roles/owner.ex

@@ -27,6 +27,8 @@ defmodule Rbac.Roles.Owner do
         "organization.secrets.view",
         "organization.self_hosted_agents.manage",
         "organization.self_hosted_agents.view",
+        "organization.service_accounts.view",
+        "organization.service_accounts.manage",
         "organization.view",
         "project.access.manage",
         "project.access.view",