From 7e285eca9459c7306fa598eecb51a8d5704ab7d7 Mon Sep 17 00:00:00 2001
From: Adam Jordens <adam@jordens.org>
Date: Mon, 22 Apr 2019 13:43:16 -0700
Subject: [PATCH] fix(api): Support `legacyFallback` for `BUILD_SERVICE` (#385)

When `service.fiat.legacyFallback` is `true`, this will implicitly allow
access to all build services in the event that `fiat` is unavailable.
---
 .../netflix/spinnaker/fiat/shared/FiatPermissionEvaluator.java  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fiat-api/src/main/java/com/netflix/spinnaker/fiat/shared/FiatPermissionEvaluator.java b/fiat-api/src/main/java/com/netflix/spinnaker/fiat/shared/FiatPermissionEvaluator.java
index 704b34ceb..a056e2eba 100644
--- a/fiat-api/src/main/java/com/netflix/spinnaker/fiat/shared/FiatPermissionEvaluator.java
+++ b/fiat-api/src/main/java/com/netflix/spinnaker/fiat/shared/FiatPermissionEvaluator.java
@@ -329,7 +329,7 @@ private boolean permissionContains(UserPermission.View permission,
             .stream()
             .anyMatch(view -> view.getName().equalsIgnoreCase(resourceName));
       case BUILD_SERVICE:
-        return containsAuth.apply(permission.getBuildServices());
+        return permission.isLegacyFallback() || containsAuth.apply(permission.getBuildServices());
       default:
         return false;
     }