Remove RW on license and download from preset editor role (#19997)

This commit is contained in:
matheus 2023-01-10 10:14:31 -03:00 committed by GitHub
parent af251b47ab
commit 9eb606829c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -74,8 +74,6 @@ func NewPresetEditorRole() types.Role {
types.NewRule(types.KindDatabaseCertificate, RW()),
types.NewRule(types.KindInstaller, RW()),
types.NewRule(types.KindDevice, append(RW(), types.VerbCreateEnrollToken, types.VerbEnroll)),
types.NewRule(types.KindLicense, RO()),
types.NewRule(types.KindDownload, RO()),
types.NewRule(types.KindDatabaseService, RO()),
types.NewRule(types.KindInstance, RO()),
// Please see defaultAllowRules when adding a new rule.