use more reduced role

Emyrk · Emyrk · commit bcfd754ac696 · 2025-06-12T13:47:34.000-05:00
diff --git a/coderd/parameters.go b/coderd/parameters.go
@@ -119,7 +119,7 @@ func (api *API) handleDynamicParameters(listen bool, rw http.ResponseWriter, r *
 
 	// nolint:gocritic // We need to fetch the templates files for the Terraform
 	// evaluator, and the user likely does not have permission.
-	fileCtx := dbauthz.AsProvisionerd(ctx)
+	fileCtx := dbauthz.AsFileReader(ctx)
 	fileID, err := api.Database.GetFileIDByTemplateVersionID(fileCtx, templateVersion.ID)
 	if err != nil {
 		httpapi.Write(ctx, rw, http.StatusInternalServerError, codersdk.Response{
