aboutsummaryrefslogtreecommitdiffstats
path: root/controller-api/src
diff options
context:
space:
mode:
authorØyvind Grønnesby <oyving@yahooinc.com>2023-04-20 13:37:36 +0200
committerGitHub <noreply@github.com>2023-04-20 13:37:36 +0200
commitc9bfb7a691380acc431934533048fc6ecc1c1862 (patch)
tree232c856d97374676c059e80eb8c0a6e3852fd8de /controller-api/src
parentf88bd3be35b35140a98dc3ba888e615d1dd5baa6 (diff)
parent0b897b832faf5fb3afa980bfa1fcb2fba94b54f2 (diff)
Merge pull request #26790 from vespa-engine/ogronnesby/grant-configserver-v1-to-supporters
Re-enable the actions in the node view for supporters
Diffstat (limited to 'controller-api/src')
-rw-r--r--controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/role/Policy.java5
1 files changed, 4 insertions, 1 deletions
diff --git a/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/role/Policy.java b/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/role/Policy.java
index 2d4f98dfa8d..bb53ae61525 100644
--- a/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/role/Policy.java
+++ b/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/role/Policy.java
@@ -33,7 +33,10 @@ enum Policy {
/** Full access to everything. */
supporter(Privilege.grant(Action.read)
- .on(PathGroup.all())
+ .on(PathGroup.allExcept(PathGroup.classifiedOperator))
+ .in(SystemName.all()),
+ Privilege.grant(Action.all())
+ .on(PathGroup.classifiedOperator)
.in(SystemName.all())),
/** Full access to user management for a tenant in select systems. */