fix(model-server): make modelix-admin also model-server admin

When a user is assigned the role modelix-admin in keycloak then he should have admin permissions on the model-server.
modelix · Nov 25, 2024 · 7411ba1 · 7411ba1
1 parent 2168ffe
commit 7411ba1
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/model-server/src/main/kotlin/org/modelix/model/server/ModelServerPermissionSchema.kt b/model-server/src/main/kotlin/org/modelix/model/server/ModelServerPermissionSchema.kt
@@ -17,6 +17,7 @@
 package org.modelix.model.server
 
 import org.modelix.authorization.permissions.PermissionParts
+import org.modelix.authorization.permissions.PermissionSchemaBase
 import org.modelix.authorization.permissions.buildPermissionSchema
 import org.modelix.model.lazy.BranchReference
 import org.modelix.model.lazy.RepositoryId
@@ -45,7 +46,9 @@ object ModelServerPermissionSchema {
 
     val SCHEMA = buildPermissionSchema {
         resource(MODEL_SERVER) {
-            permission(ADMIN)
+            permission(ADMIN) {
+                includedIn(PermissionSchemaBase.cluster.admin.parts[0], PermissionSchemaBase.cluster.admin.parts[1])
+            }
         }
 
         resource(PERMISSION_SCHEMA) {