Update openfga entity_reconcile to require the admin role (#3818)

Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
mindersec · Jul 9, 2024 · f1a6904 · f1a6904
1 parent 35760c7
commit f1a6904
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/internal/authz/model/minder.fga b/internal/authz/model/minder.fga
@@ -66,7 +66,7 @@ type project
 
     define remote_repo_get: admin
 
-    define entity_reconcile: editor
+    define entity_reconcile: admin
 
     define artifact_get: viewer
     define artifact_create: editor