From 3eafe6c39da6faf3167a1f4cfbb718296520dde4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Toma=C5=BE=20Jerman?= Date: Thu, 15 Jul 2021 12:52:03 +0200 Subject: [PATCH] Update base access control provisioning for ComposeRecords --- .../000_base/compose_access_control.yaml | 23 ++++++++----------- 1 file changed, 10 insertions(+), 13 deletions(-) diff --git a/provision/000_base/compose_access_control.yaml b/provision/000_base/compose_access_control.yaml index 7f434b598..9ff4588d4 100644 --- a/provision/000_base/compose_access_control.yaml +++ b/provision/000_base/compose_access_control.yaml @@ -15,9 +15,8 @@ allow: corteza::compose:chart/*/*: - read -# @todo implement support for record resource import in Envoy -# corteza::compose:record/*/*/*: -# - read + corteza::compose:record/*/*/*: + - read admins: corteza::compose/: @@ -50,11 +49,10 @@ allow: - record.value.read - record.value.update -# @todo implement support for record resource import in Envoy -# corteza::compose:record/*/*/*: -# - read -# - update -# - delete + corteza::compose:record/*/*/*: + - read + - update + - delete corteza::compose:chart/*/*: - read @@ -97,11 +95,10 @@ allow: - record.value.read - record.value.update -# @todo implement support for record resource import in Envoy -# corteza::compose:record/*/*/*: -# - read -# - update -# - delete + corteza::compose:record/*/*/*: + - read + - update + - delete corteza::compose:chart/*/*: - read