add the permission to read org users to team creator (#45224)

This commit is contained in:
Ieva 2022-02-10 14:51:05 +00:00 committed by GitHub
parent ec48b81388
commit 9fafbfc87e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -215,11 +215,12 @@ func (hs *HTTPServer) declareFixedRoles() error {
Role: accesscontrol.RoleDTO{
Name: "fixed:teams:creator",
DisplayName: "Team creator",
Description: "Create teams.",
Description: "Create teams and read organisation users (required to manage the created teams).",
Group: "Teams",
Version: 1,
Version: 2,
Permissions: []accesscontrol.Permission{
{Action: accesscontrol.ActionTeamsCreate},
{Action: accesscontrol.ActionOrgUsersRead, Scope: accesscontrol.ScopeUsersAll},
},
},
Grants: teamCreatorGrants,