From a1025489c8542548ddcab3653a497cf65330ad5a Mon Sep 17 00:00:00 2001
From: Abdul-Az <aazeez@progress.com>
Date: Fri, 17 Sep 2021 12:13:54 +0530
Subject: [PATCH] iam added on roles tab

Signed-off-by: Abdul-Az <aazeez@progress.com>
---
 api/external/infra_proxy/infra_proxy.proto      |  4 ++--
 .../infra-roles/infra-roles.component.html      | 17 +++++++++--------
 2 files changed, 11 insertions(+), 10 deletions(-)

diff --git a/api/external/infra_proxy/infra_proxy.proto b/api/external/infra_proxy/infra_proxy.proto
index 54183cbe70c..96ebcb99c0b 100644
--- a/api/external/infra_proxy/infra_proxy.proto
+++ b/api/external/infra_proxy/infra_proxy.proto
@@ -143,12 +143,12 @@ service InfraProxy {
     option (google.api.http).post = "/api/v0/infra/servers/{server_id}/orgs/{org_id}/roles";
     option (google.api.http).body = "*";
     option (chef.automate.api.iam.policy).resource = "infra:infraServers:{server_id}:orgs:{org_id}:roles";
-    option (chef.automate.api.iam.policy).action = "infra:infraServers:update";
+    option (chef.automate.api.iam.policy).action = "infra:infraServersOrgsRoles:update";
   };
   rpc DeleteRole (infra_proxy.request.Role) returns (infra_proxy.response.Role) {
     option (google.api.http).delete = "/api/v0/infra/servers/{server_id}/orgs/{org_id}/roles/{name}";
     option (chef.automate.api.iam.policy).resource = "infra:infraServers:{server_id}:orgs:{org_id}:roles";
-    option (chef.automate.api.iam.policy).action = "infra:infraServers:update";
+    option (chef.automate.api.iam.policy).action = "infra:infraServersOrgsRoles:delete";
   };
   rpc UpdateRole (infra_proxy.request.UpdateRole) returns (infra_proxy.response.Role) {
     option (google.api.http).put = "/api/v0/infra/servers/{server_id}/orgs/{org_id}/roles/{name}";
diff --git a/components/automate-ui/src/app/modules/infra-proxy/infra-roles/infra-roles.component.html b/components/automate-ui/src/app/modules/infra-proxy/infra-roles/infra-roles.component.html
index d075a215f39..8ff02d4800a 100644
--- a/components/automate-ui/src/app/modules/infra-proxy/infra-roles/infra-roles.component.html
+++ b/components/automate-ui/src/app/modules/infra-proxy/infra-roles/infra-roles.component.html
@@ -33,13 +33,15 @@
           [pageIndex]= "currentPage"
           (changePage)= "onUpdatePage($event)"
         ></app-paginator>
-        <chef-button
-          id="role-create"
-          primary
-          (click)="openCreateModal()"
-          data-cy="create-role-button">
-          Create Role
-        </chef-button>
+        <app-authorized [allOf]="['/api/v0/infra/servers/{server_id}/orgs/{org_id}/roles', 'post', [serverId, orgId]]">
+          <chef-button
+            id="role-create"
+            primary
+            (click)="openCreateModal()"
+            data-cy="create-role-button">
+            Create Role
+          </chef-button>
+        </app-authorized>
       </div>
       <chef-loading-spinner
         class="full-screen-spinner"
@@ -83,7 +85,6 @@
           </chef-tbody>
         </chef-table>
       </div>
-
       <app-page-picker
         *ngIf="!loading"
         class="roles-list-paging"