Merge pull request #360 from ca-risken/fix-policy

fix: default policy
ca-risken · Apr 16, 2024 · 3900380 · 3900380
2 parents 2e3fcbb + 5181026
commit 3900380
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/pkg/server/project/project.go b/pkg/server/project/project.go
@@ -119,7 +119,11 @@ func (p *ProjectService) createDefaultRole(ctx context.Context, ownerUserID, pro
 	findingEditor := "finding-editor"
 	viewerActionPtn := "get|list|is-admin|put-alert-first-viewed-at"
 
-	for name, actionPtn := range map[string]string{projectAdmin: ".*", projectViewer: viewerActionPtn, findingEditor: viewerActionPtn + "|/finding/.+|/alert/.+"} {
+	for name, actionPtn := range map[string]string{
+		projectAdmin:  ".*",
+		projectViewer: viewerActionPtn,
+		findingEditor: viewerActionPtn + "|^finding/.+|^alert/.+",
+	} {
 		policy, err := p.iamClient.PutPolicy(ctx, &iam.PutPolicyRequest{
 			ProjectId: projectID,
 			Policy: &iam.PolicyForUpsert{