From 5c632c9aecf16919417a018451b1758c36532870 Mon Sep 17 00:00:00 2001 From: Steven Masley Date: Tue, 24 May 2022 10:57:20 -0500 Subject: [PATCH] fix: Add template read permission node to members --- cli/create_test.go | 4 +++- coderd/rbac/builtin.go | 6 ++++++ 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/cli/create_test.go b/cli/create_test.go index e126ffac6142c..2a6ff752d201f 100644 --- a/cli/create_test.go +++ b/cli/create_test.go @@ -121,7 +121,9 @@ func TestCreate(t *testing.T) { coderdtest.AwaitTemplateVersionJob(t, client, version.ID) _ = coderdtest.CreateTemplate(t, client, user.OrganizationID, version.ID) cmd, root := clitest.New(t, "create", "my-workspace", "-y") - clitest.SetupConfig(t, client, root) + + member := coderdtest.CreateAnotherUser(t, client, user.OrganizationID) + clitest.SetupConfig(t, member, root) cmdCtx, done := context.WithTimeout(context.Background(), time.Second*3) go func() { defer done() diff --git a/coderd/rbac/builtin.go b/coderd/rbac/builtin.go index d39d1b56fca49..0bb5e413a4eff 100644 --- a/coderd/rbac/builtin.go +++ b/coderd/rbac/builtin.go @@ -129,6 +129,12 @@ var ( Action: ActionRead, ResourceID: "*", }, + { + // All org members can read templates in the org + ResourceType: ResourceTemplate.Type, + Action: ActionRead, + ResourceID: "*", + }, }, }, }