allow service_token to view user_key

CanDIG · May 1, 2024 · 9aba05c · 9aba05c
1 parent 0e9f58a
commit 9aba05c
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/permissions_engine/authz.rego b/permissions_engine/authz.rego
@@ -16,6 +16,9 @@ rights = {
     "site_admin": {
         "path": ["v1", "data", "permissions", "site_admin"]
     },
+    "user_id": {
+        "path": ["v1", "data", "idp", "user_key"]
+    },
     "tokenControlledAccessREMS": {
         "path": ["v1", "data", "ga4ghPassport", "tokenControlledAccessREMS"]
     }
@@ -29,7 +32,7 @@ tokens = {
         "roles": ["admin"]
     },
     service_token : {
-        "roles": ["datasets", "allowed", "site_admin", "tokenControlledAccessREMS"]
+        "roles": ["datasets", "allowed", "site_admin", "user_id", "tokenControlledAccessREMS"]
     }
 }