diff --git a/cli/create_test.go b/cli/create_test.go index e126ffac6142c..2a6ff752d201f 100644 --- a/cli/create_test.go +++ b/cli/create_test.go @@ -121,7 +121,9 @@ func TestCreate(t *testing.T) { coderdtest.AwaitTemplateVersionJob(t, client, version.ID) _ = coderdtest.CreateTemplate(t, client, user.OrganizationID, version.ID) cmd, root := clitest.New(t, "create", "my-workspace", "-y") - clitest.SetupConfig(t, client, root) + + member := coderdtest.CreateAnotherUser(t, client, user.OrganizationID) + clitest.SetupConfig(t, member, root) cmdCtx, done := context.WithTimeout(context.Background(), time.Second*3) go func() { defer done() diff --git a/coderd/rbac/builtin.go b/coderd/rbac/builtin.go index d39d1b56fca49..0bb5e413a4eff 100644 --- a/coderd/rbac/builtin.go +++ b/coderd/rbac/builtin.go @@ -129,6 +129,12 @@ var ( Action: ActionRead, ResourceID: "*", }, + { + // All org members can read templates in the org + ResourceType: ResourceTemplate.Type, + Action: ActionRead, + ResourceID: "*", + }, }, }, }