diff options
Diffstat (limited to 'controller-api')
-rw-r--r-- | controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/role/Policy.java | 14 | ||||
-rw-r--r-- | controller-api/src/test/java/com/yahoo/vespa/hosted/controller/api/role/RoleTest.java | 4 |
2 files changed, 9 insertions, 9 deletions
diff --git a/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/role/Policy.java b/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/role/Policy.java index ff29725fe7c..12bae955c20 100644 --- a/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/role/Policy.java +++ b/controller-api/src/main/java/com/yahoo/vespa/hosted/controller/api/role/Policy.java @@ -145,32 +145,32 @@ enum Policy { /** Read your own instrument information */ paymentInstrumentRead(Privilege.grant(Action.read) .on(PathGroup.billingInstrument) - .in(SystemName.PublicCd)), + .in(SystemName.PublicCd, SystemName.Public)), /** Ability to update tenant payment instrument */ paymentInstrumentUpdate(Privilege.grant(Action.update) .on(PathGroup.billingInstrument) - .in(SystemName.PublicCd)), + .in(SystemName.PublicCd, SystemName.Public)), /** Ability to remove your own payment instrument */ paymentInstrumentDelete(Privilege.grant(Action.delete) .on(PathGroup.billingInstrument) - .in(SystemName.PublicCd)), + .in(SystemName.PublicCd, SystemName.Public)), /** Get the token to view instrument form */ paymentInstrumentCreate(Privilege.grant(Action.read) .on(PathGroup.billingToken) - .in(SystemName.PublicCd)), + .in(SystemName.PublicCd, SystemName.Public)), /** Ability to update tenant payment instrument */ planUpdate(Privilege.grant(Action.update) .on(PathGroup.billingPlan) - .in(SystemName.PublicCd)), + .in(SystemName.PublicCd, SystemName.Public)), /** Ability to update tenant collection method */ collectionMethodUpdate(Privilege.grant(Action.update) .on(PathGroup.billingCollection) - .in(SystemName.PublicCd)), + .in(SystemName.PublicCd, SystemName.Public)), /** Read the generated bills */ @@ -181,7 +181,7 @@ enum Policy { /** Invoice management */ hostedAccountant(Privilege.grant(Action.all()) .on(PathGroup.hostedAccountant) - .in(SystemName.PublicCd)), + .in(SystemName.PublicCd, SystemName.Public)), /** Listing endpoint certificate request info */ endpointCertificateRequestInfo(Privilege.grant(Action.read) diff --git a/controller-api/src/test/java/com/yahoo/vespa/hosted/controller/api/role/RoleTest.java b/controller-api/src/test/java/com/yahoo/vespa/hosted/controller/api/role/RoleTest.java index ab72098303f..b5b66b45c22 100644 --- a/controller-api/src/test/java/com/yahoo/vespa/hosted/controller/api/role/RoleTest.java +++ b/controller-api/src/test/java/com/yahoo/vespa/hosted/controller/api/role/RoleTest.java @@ -190,7 +190,7 @@ public class RoleTest { @Test public void billing_test() { - var tester = new EnforcerTester(publicCdEnforcer); + var tester = new EnforcerTester(publicEnforcer); var accountant = Role.hostedAccountant(); var operator = Role.hostedOperator(); @@ -201,7 +201,7 @@ public class RoleTest { tester.on("/billing/v1/tenant/t1/token") .assertAction(accountant) - .assertAction(operator, Action.read) + .assertAction(operator) .assertAction(reader) .assertAction(developer) .assertAction(admin, Action.read) |