Do explicit check for hosted operator membership if user tenant

1 files changed, 1 insertions, 1 deletions

diff --git a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/ControllerAuthorizationFilter.java b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/ControllerAuthorizationFilter.java
index 0b1b88c4389..3b8e7e48cb2 100644
--- a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/ControllerAuthorizationFilter.java
+++ b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/ControllerAuthorizationFilter.java
@@ -170,7 +170,7 @@ public class ControllerAuthorizationFilter extends CorsRequestFilterBase {
                 return false;
             }
             AthenzUser user = (AthenzUser) identity;
-            return ((UserTenant) tenant).is(user.getName());
+            return ((UserTenant) tenant).is(user.getName()) || isHostedOperator(identity);
         }
         throw new InternalServerErrorException("Unknown tenant type: " + tenant.getClass().getSimpleName());
     }