diff options
author | Øyvind Grønnesby <oyving@yahooinc.com> | 2023-04-20 11:15:00 +0200 |
---|---|---|
committer | Øyvind Grønnesby <oyving@yahooinc.com> | 2023-04-20 11:15:00 +0200 |
commit | 0b897b832faf5fb3afa980bfa1fcb2fba94b54f2 (patch) | |
tree | f1b1394189a3366100acd812bd5174596e6cb106 /controller-api | |
parent | 4bf83d5e87a8896ce3b6a14fb0889a2891053bf1 (diff) |
Re-enable the actions in the node view for supporters
Diffstat (limited to 'controller-api')
-rw-r--r-- | controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/role/Policy.java | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/role/Policy.java b/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/role/Policy.java index 2d4f98dfa8d..bb53ae61525 100644 --- a/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/role/Policy.java +++ b/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/role/Policy.java @@ -33,7 +33,10 @@ enum Policy { /** Full access to everything. */ supporter(Privilege.grant(Action.read) - .on(PathGroup.all()) + .on(PathGroup.allExcept(PathGroup.classifiedOperator)) + .in(SystemName.all()), + Privilege.grant(Action.all()) + .on(PathGroup.classifiedOperator) .in(SystemName.all())), /** Full access to user management for a tenant in select systems. */ |