From 072bea9d6bab89268e1fb98a985127ecb612f4a1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Toma=C5=BE=20Jerman?= Date: Mon, 16 Aug 2021 15:10:40 +0200 Subject: [PATCH] Add missing envoy system:report definitions --- pkg/envoy/store/rbac_rule_marshal.go | 2 ++ provision/000_base/system_access_control.yaml | 16 ++++++++++++++++ 2 files changed, 18 insertions(+) diff --git a/pkg/envoy/store/rbac_rule_marshal.go b/pkg/envoy/store/rbac_rule_marshal.go index f96fc3e5a..67de601b7 100644 --- a/pkg/envoy/store/rbac_rule_marshal.go +++ b/pkg/envoy/store/rbac_rule_marshal.go @@ -258,6 +258,8 @@ func (n *rbacRule) Encode(ctx context.Context, pl *payload) (err error) { case systemTypes.TemplateResourceType: // @todo add support for importing rbac rules for specific template res.Resource = systemTypes.TemplateRbacResource(p1ID) + case systemTypes.ReportResourceType: + res.Resource = systemTypes.ReportRbacResource(p1ID) case messagebus.QueueResourceType: // @todo add support for importing rbac rules for specific queue res.Resource = messagebus.QueueRbacResource(p1ID) diff --git a/provision/000_base/system_access_control.yaml b/provision/000_base/system_access_control.yaml index 3d770e232..59ee8e489 100644 --- a/provision/000_base/system_access_control.yaml +++ b/provision/000_base/system_access_control.yaml @@ -39,6 +39,8 @@ allow: - apigw-routes.search - apigw-filter.create - apigw-filters.search + - report.create + - reports.search corteza::system:auth-client/*: - read @@ -89,6 +91,12 @@ allow: - update - delete + corteza::system:report/*: + - read + - update + - delete + - run + security_admins: corteza::compose/: - grant @@ -123,6 +131,8 @@ allow: - reminder.assign - queue.create - queues.search + - report.create + - reports.search corteza::system:auth-client/*: - read @@ -147,3 +157,9 @@ allow: - update - delete - members.manage + + corteza::system:report/*: + - read + - update + - delete + - run \ No newline at end of file