From 5864853117257a35446dae18857457a650e06ac4 Mon Sep 17 00:00:00 2001 From: Theresa Kamerman Date: Mon, 16 Oct 2023 10:40:12 -0700 Subject: [PATCH] Fix `update` permissions on `extension_roles` As an association table, there should be no update permissions on this table. However, because `role` is a text field that doesn't have access to the table it should have a foreign key with (the `user_roles` table), `update` permission is being granted to resolve typos --- .../databases/AerieUI/tables/public_extension_roles.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deployment/hasura/metadata/databases/AerieUI/tables/public_extension_roles.yaml b/deployment/hasura/metadata/databases/AerieUI/tables/public_extension_roles.yaml index 668ba7a755..04ea56de64 100644 --- a/deployment/hasura/metadata/databases/AerieUI/tables/public_extension_roles.yaml +++ b/deployment/hasura/metadata/databases/AerieUI/tables/public_extension_roles.yaml @@ -29,7 +29,7 @@ insert_permissions: update_permissions: - role: aerie_admin permission: - columns: [extension_id, role] + columns: [role] filter: {} delete_permissions: - role: aerie_admin