iam added on roles tab

Signed-off-by: Abdul-Az <aazeez@progress.com>
chef · Apr 28, 2022 · e6e7ec1 · e6e7ec1
1 parent 103f703
commit e6e7ec1
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 10 deletions.
diff --git a/api/external/infra_proxy/infra_proxy.proto b/api/external/infra_proxy/infra_proxy.proto
@@ -143,12 +143,12 @@ service InfraProxy {
     option (google.api.http).post = "/api/v0/infra/servers/{server_id}/orgs/{org_id}/roles";
     option (google.api.http).body = "*";
     option (chef.automate.api.iam.policy).resource = "infra:infraServers:{server_id}:orgs:{org_id}:roles";
-    option (chef.automate.api.iam.policy).action = "infra:infraServers:update";
+    option (chef.automate.api.iam.policy).action = "infra:infraServersOrgsRoles:update";
   };
   rpc DeleteRole (infra_proxy.request.Role) returns (infra_proxy.response.Role) {
     option (google.api.http).delete = "/api/v0/infra/servers/{server_id}/orgs/{org_id}/roles/{name}";
     option (chef.automate.api.iam.policy).resource = "infra:infraServers:{server_id}:orgs:{org_id}:roles";
-    option (chef.automate.api.iam.policy).action = "infra:infraServers:update";
+    option (chef.automate.api.iam.policy).action = "infra:infraServersOrgsRoles:delete";
   };
   rpc UpdateRole (infra_proxy.request.UpdateRole) returns (infra_proxy.response.Role) {
     option (google.api.http).put = "/api/v0/infra/servers/{server_id}/orgs/{org_id}/roles/{name}";

diff --git a/components/automate-ui/src/app/modules/infra-proxy/infra-roles/infra-roles.component.html b/components/automate-ui/src/app/modules/infra-proxy/infra-roles/infra-roles.component.html
@@ -33,13 +33,15 @@
           [pageIndex]= "currentPage"
           (changePage)= "onUpdatePage($event)"
         ></app-paginator>
-        <chef-button
-          id="role-create"
-          primary
-          (click)="openCreateModal()"
-          data-cy="create-role-button">
-          Create Role
-        </chef-button>
+        <app-authorized [allOf]="['/api/v0/infra/servers/{server_id}/orgs/{org_id}/roles', 'post', [serverId, orgId]]">
+          <chef-button
+            id="role-create"
+            primary
+            (click)="openCreateModal()"
+            data-cy="create-role-button">
+            Create Role
+          </chef-button>
+        </app-authorized>
       </div>
       <chef-loading-spinner
         class="full-screen-spinner"
@@ -83,7 +85,6 @@
           </chef-tbody>
         </chef-table>
       </div>
-
       <app-page-picker
         *ngIf="!loading"
         class="roles-list-paging"