add the permission to read org users to team creator (#45224)

This commit is contained in:
Ieva
2022-02-10 14:51:05 +00:00
committed by GitHub
parent ec48b81388
commit 9fafbfc87e

View File

@@ -215,11 +215,12 @@ func (hs *HTTPServer) declareFixedRoles() error {
Role: accesscontrol.RoleDTO{ Role: accesscontrol.RoleDTO{
Name: "fixed:teams:creator", Name: "fixed:teams:creator",
DisplayName: "Team creator", DisplayName: "Team creator",
Description: "Create teams.", Description: "Create teams and read organisation users (required to manage the created teams).",
Group: "Teams", Group: "Teams",
Version: 1, Version: 2,
Permissions: []accesscontrol.Permission{ Permissions: []accesscontrol.Permission{
{Action: accesscontrol.ActionTeamsCreate}, {Action: accesscontrol.ActionTeamsCreate},
{Action: accesscontrol.ActionOrgUsersRead, Scope: accesscontrol.ScopeUsersAll},
}, },
}, },
Grants: teamCreatorGrants, Grants: teamCreatorGrants,