roles are personal user data

Emyrk · Emyrk · commit 1823973c0f76 · 2024-05-14T17:00:07.000-05:00
diff --git a/coderd/users.go b/coderd/users.go
@@ -1022,7 +1022,7 @@ func (api *API) userRoles(rw http.ResponseWriter, r *http.Request) {
 	ctx := r.Context()
 	user := httpmw.UserParam(r)
 
-	if !api.Authorize(r, policy.ActionRead, user) {
+	if !api.Authorize(r, policy.ActionReadPersonal, user) {
 		httpapi.ResourceNotFound(rw)
 		return
 	}

Original file line number	Diff line number	Diff line change
`@@ -1022,7 +1022,7 @@ func (api API) userRoles(rw http.ResponseWriter, r http.Request) {`
`1022`	`1022`	`ctx := r.Context()`
`1023`	`1023`	`user := httpmw.UserParam(r)`
`1024`	`1024`
`1025`		`- if !api.Authorize(r, policy.ActionRead, user) {`
	`1025`	`+ if !api.Authorize(r, policy.ActionReadPersonal, user) {`
`1026`	`1026`	`httpapi.ResourceNotFound(rw)`
`1027`	`1027`	`return`
`1028`	`1028`	`}`