Merge pull request from GHSA-rjxg-rpg3-9r89

* feat: remove the config_read scope from the viewer role * feat: remove the CONFIG_READ scope from the contributor role as well
ethyca · Oct 22, 2023 · c9f3a62 · c9f3a62
1 parent cd344d0
commit c9f3a62
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/fides/api/oauth/roles.py b/src/fides/api/oauth/roles.py
@@ -86,7 +86,6 @@ class RoleRegistryEnum(Enum):
 viewer_scopes = [  # Intentionally omitted USER_PERMISSION_READ
     CLI_OBJECTS_READ,
     CLIENT_READ,
-    CONFIG_READ,
     CONNECTION_READ,
     CONSENT_READ,
     CONSENT_SETTINGS_READ,
@@ -126,6 +125,7 @@ class RoleRegistryEnum(Enum):
     MESSAGING_CREATE_OR_UPDATE,
     MESSAGING_DELETE,
     PRIVACY_REQUEST_NOTIFICATIONS_CREATE_OR_UPDATE,
+    CONFIG_READ,
     CONFIG_UPDATE,
     USER_PERMISSION_ASSIGN_OWNERS,
 ]