remove org write perms for org admins (#29)

groundcover-com · Jun 25, 2024 · 3c62d5e · 3c62d5e
1 parent e072ccc
commit 3c62d5e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pkg/api/accesscontrol.go b/pkg/api/accesscontrol.go
@@ -231,8 +231,8 @@ func (hs *HTTPServer) declareFixedRoles() error {
 			Group:       "Organizations",
 			Permissions: ac.ConcatPermissions(orgReaderRole.Role.Permissions, []ac.Permission{
 				{Action: ac.ActionOrgsPreferencesRead},
-				{Action: ac.ActionOrgsWrite},
-				{Action: ac.ActionOrgsPreferencesWrite},
+				// {Action: ac.ActionOrgsWrite},
+				// {Action: ac.ActionOrgsPreferencesWrite},
 			}),
 		},
 		Grants: []string{string(org.RoleAdmin)},