Update authorization configurations (#727)

pipe-cd · Aug 28, 2020 · 75ffcf4 · 75ffcf4
1 parent ab41ef4
commit 75ffcf4
Showing 1 changed file with 20 additions and 20 deletions.
diff --git a/pkg/app/api/service/webservice/service.pb.auth.go b/pkg/app/api/service/webservice/service.pb.auth.go
@@ -70,36 +70,36 @@ func (a *authorizer) Authorize(method string, r model.Role) bool {
 		return isAdmin(r)
 	case "/pipe.api.service.webservice.WebService/UpdateProjectRBACConfig":
 		return isAdmin(r)
-	case "/pipe.api.service.webservice.WebService/ListEnvironments":
-		return isAdmin(r) || isEditor(r)
-	case "/pipe.api.service.webservice.WebService/ListPipeds":
-		return isAdmin(r) || isEditor(r)
-	case "/pipe.api.service.webservice.WebService/GetPiped":
-		return isAdmin(r) || isEditor(r)
-	case "/pipe.api.service.webservice.WebService/ListApplications":
-		return isAdmin(r) || isEditor(r)
 	case "/pipe.api.service.webservice.WebService/SyncApplication":
 		return isAdmin(r) || isEditor(r)
-	case "/pipe.api.service.webservice.WebService/GetApplication":
-		return isAdmin(r) || isEditor(r)
-	case "/pipe.api.service.webservice.WebService/ListDeployments":
-		return isAdmin(r) || isEditor(r)
-	case "/pipe.api.service.webservice.WebService/GetDeployment":
-		return isAdmin(r) || isEditor(r)
-	case "/pipe.api.service.webservice.WebService/GetStageLog":
-		return isAdmin(r) || isEditor(r)
 	case "/pipe.api.service.webservice.WebService/CancelDeployment":
 		return isAdmin(r) || isEditor(r)
 	case "/pipe.api.service.webservice.WebService/ApproveStage":
 		return isAdmin(r) || isEditor(r)
 	case "/pipe.api.service.webservice.WebService/GetApplicationLiveState":
-		return isAdmin(r) || isEditor(r)
+		return isAdmin(r) || isEditor(r) || isViewer(r)
 	case "/pipe.api.service.webservice.WebService/GetProject":
-		return isAdmin(r) || isEditor(r)
+		return isAdmin(r) || isEditor(r) || isViewer(r)
 	case "/pipe.api.service.webservice.WebService/GetCommand":
-		return isAdmin(r) || isEditor(r)
+		return isAdmin(r) || isEditor(r) || isViewer(r)
 	case "/pipe.api.service.webservice.WebService/ListDeploymentConfigTemplates":
-		return isAdmin(r) || isEditor(r)
+		return isAdmin(r) || isEditor(r) || isViewer(r)
+	case "/pipe.api.service.webservice.WebService/ListEnvironments":
+		return isAdmin(r) || isEditor(r) || isViewer(r)
+	case "/pipe.api.service.webservice.WebService/ListPipeds":
+		return isAdmin(r) || isEditor(r) || isViewer(r)
+	case "/pipe.api.service.webservice.WebService/GetPiped":
+		return isAdmin(r) || isEditor(r) || isViewer(r)
+	case "/pipe.api.service.webservice.WebService/ListApplications":
+		return isAdmin(r) || isEditor(r) || isViewer(r)
+	case "/pipe.api.service.webservice.WebService/GetApplication":
+		return isAdmin(r) || isEditor(r) || isViewer(r)
+	case "/pipe.api.service.webservice.WebService/ListDeployments":
+		return isAdmin(r) || isEditor(r) || isViewer(r)
+	case "/pipe.api.service.webservice.WebService/GetDeployment":
+		return isAdmin(r) || isEditor(r) || isViewer(r)
+	case "/pipe.api.service.webservice.WebService/GetStageLog":
+		return isAdmin(r) || isEditor(r) || isViewer(r)
 	case "/pipe.api.service.webservice.WebService/GetMe":
 		return isAdmin(r) || isEditor(r) || isViewer(r)
 	}