refactor: limit exec permission to project

snapp-incubator · Jul 14, 2024 · 4bc3c27 · 4bc3c27
1 parent 4878fe4
commit 4bc3c27
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/controllers/argocduser_controller.go b/controllers/argocduser_controller.go
@@ -199,7 +199,7 @@ func (r *ArgocdUserReconciler) AddArgocdRBACPolicy(ctx context.Context, argocdus
 		"p, role:" + argocduser.Name + "-admin, repositories, update, " + argocduser.Name + "/*, allow",
 		"p, role:" + argocduser.Name + "-view, repositories, get, " + argocduser.Name + "/*, allow",
 		"p, role:" + argocduser.Name + "-view, applications, get, " + argocduser.Name + "/*, allow",
-		"p, role:" + argocduser.Name + "-admin, exec, create, *, allow",
+		"p, role:" + argocduser.Name + "-admin, exec, create, " + argocduser.Name + "/*, allow",
 	}
 
 	//add argocd rbac policy