fix(model-server): make modelix-admin also model-server admin

When a user is assigned the role modelix-admin in keycloak then he should have admin permissions on the model-server.
modelix · Dec 11, 2024 · dd1fe1d · dd1fe1d
1 parent 71dc994
commit dd1fe1d
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/model-server/src/main/kotlin/org/modelix/model/server/ModelServerPermissionSchema.kt b/model-server/src/main/kotlin/org/modelix/model/server/ModelServerPermissionSchema.kt
@@ -1,6 +1,7 @@
 package org.modelix.model.server
 
 import org.modelix.authorization.permissions.PermissionParts
+import org.modelix.authorization.permissions.PermissionSchemaBase
 import org.modelix.authorization.permissions.buildPermissionSchema
 import org.modelix.model.lazy.BranchReference
 import org.modelix.model.lazy.RepositoryId
@@ -29,7 +30,9 @@ object ModelServerPermissionSchema {
 
     val SCHEMA = buildPermissionSchema {
         resource(MODEL_SERVER) {
-            permission(ADMIN)
+            permission(ADMIN) {
+                includedIn(PermissionSchemaBase.cluster.admin.parts[0], PermissionSchemaBase.cluster.admin.parts[1])
+            }
         }
 
         resource(PERMISSION_SCHEMA) {