From 724c775babdf272ce76d80e9325a0502635f3050 Mon Sep 17 00:00:00 2001
From: Matheus Macabu <macabu@users.noreply.github.com>
Date: Tue, 29 Jul 2025 11:19:39 +0200
Subject: [PATCH] Secret: Fix create/delete basic role configuration for secure
 values (#108840)

They should be for Admins not Editors
---
 pkg/registry/apis/secret/accesscontrol.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkg/registry/apis/secret/accesscontrol.go b/pkg/registry/apis/secret/accesscontrol.go
index 2262961c087..d0561843ce7 100644
--- a/pkg/registry/apis/secret/accesscontrol.go
+++ b/pkg/registry/apis/secret/accesscontrol.go
@@ -45,7 +45,7 @@ func registerAccessControlRoles(service accesscontrol.Service) error {
 				},
 			},
 		},
-		Grants: []string{string(org.RoleEditor)},
+		Grants: []string{string(org.RoleAdmin)},
 	}
 
 	secureValuesReader := accesscontrol.RoleRegistration{
@@ -93,7 +93,7 @@ func registerAccessControlRoles(service accesscontrol.Service) error {
 				},
 			},
 		},
-		Grants: []string{string(org.RoleEditor)},
+		Grants: []string{string(org.RoleAdmin)},
 	}
 
 	// Keepers