From 84587c413f28039d2244aa5294646e41314839f4 Mon Sep 17 00:00:00 2001 From: Rohil Surana Date: Thu, 7 May 2026 16:14:56 +0530 Subject: [PATCH] fix: relax SearchOrganizationTokens authz to GetPermission --- pkg/server/connect_interceptors/authorization.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/server/connect_interceptors/authorization.go b/pkg/server/connect_interceptors/authorization.go index 43e782c36..39b65e81e 100644 --- a/pkg/server/connect_interceptors/authorization.go +++ b/pkg/server/connect_interceptors/authorization.go @@ -997,7 +997,7 @@ var authorizationValidationMap = map[string]func(ctx context.Context, handler *v }, "/raystack.frontier.v1beta1.FrontierService/SearchOrganizationTokens": func(ctx context.Context, handler *v1beta1connect.ConnectHandler, req connect.AnyRequest) error { pbReq := req.(*connect.Request[frontierv1beta1.SearchOrganizationTokensRequest]) - return handler.IsAuthorized(ctx, relation.Object{Namespace: schema.OrganizationNamespace, ID: pbReq.Msg.GetId()}, schema.UpdatePermission, req) + return handler.IsAuthorized(ctx, relation.Object{Namespace: schema.OrganizationNamespace, ID: pbReq.Msg.GetId()}, schema.GetPermission, req) }, "/raystack.frontier.v1beta1.FrontierService/GetUpcomingInvoice": func(ctx context.Context, handler *v1beta1connect.ConnectHandler, req connect.AnyRequest) error { pbReq := req.(*connect.Request[frontierv1beta1.GetUpcomingInvoiceRequest])