From 9fafbfc87e4d79243265c727eb5dbe737a45c6d6 Mon Sep 17 00:00:00 2001 From: Ieva Date: Thu, 10 Feb 2022 14:51:05 +0000 Subject: [PATCH] add the permission to read org users to team creator (#45224) --- pkg/api/roles.go | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/pkg/api/roles.go b/pkg/api/roles.go index 0fc5d75723e..98cc6bdc57e 100644 --- a/pkg/api/roles.go +++ b/pkg/api/roles.go @@ -215,11 +215,12 @@ func (hs *HTTPServer) declareFixedRoles() error { Role: accesscontrol.RoleDTO{ Name: "fixed:teams:creator", DisplayName: "Team creator", - Description: "Create teams.", + Description: "Create teams and read organisation users (required to manage the created teams).", Group: "Teams", - Version: 1, + Version: 2, Permissions: []accesscontrol.Permission{ {Action: accesscontrol.ActionTeamsCreate}, + {Action: accesscontrol.ActionOrgUsersRead, Scope: accesscontrol.ScopeUsersAll}, }, }, Grants: teamCreatorGrants,