fix(api): getWorkerModelSecretHandler permission (#6141)

Signed-off-by: francois samin <[email protected]>
ovh · Apr 7, 2022 · e80eb41 · e80eb41
1 parent 67d92cb
commit e80eb41
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/engine/api/router_middleware_auth_permission.go b/engine/api/router_middleware_auth_permission.go
@@ -367,6 +367,10 @@ func (api *API) checkGroupPermissions(ctx context.Context, w http.ResponseWriter
 			}
 		}
 	} else {
+		// Hatcheries started for "shared.infra" group are granted for group "shared.infra"
+		if isHatcheryShared(ctx) {
+			return nil
+		}
 		if !isGroupMember(ctx, g) && !isMaintainer(ctx) { // Only group member or CDS maintainer can get a group or its dependencies
 			return sdk.WithStack(sdk.ErrForbidden)
 		}