Skip to content

Commit fc86a34

Browse files
authored
feat(api-token): Allow API tokens to list workflows (#2106)
Signed-off-by: Javier Rodriguez <javier@chainloop.dev>
1 parent 0b165fa commit fc86a34

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

app/controlplane/pkg/biz/apitoken.go

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -86,8 +86,8 @@ func NewAPITokenUseCase(apiTokenRepo APITokenRepo, jwtConfig *APITokenJWTConfig,
8686
DefaultAuthzPolicies: []*authz.Policy{
8787
// Add permissions to workflow run
8888
authz.PolicyWorkflowRunList, authz.PolicyWorkflowRunRead,
89-
// To read and create workflows
90-
authz.PolicyWorkflowRead, authz.PolicyWorkflowCreate,
89+
// To read, list and create workflows
90+
authz.PolicyWorkflowRead, authz.PolicyWorkflowList, authz.PolicyWorkflowCreate,
9191
// Add permissions to workflow contract management
9292
authz.PolicyWorkflowContractList, authz.PolicyWorkflowContractRead, authz.PolicyWorkflowContractUpdate, authz.PolicyWorkflowContractCreate,
9393
// to download artifacts and list referrers

0 commit comments

Comments
 (0)