feat(security): add FleetAdmin authorization policy

2026-05-29 09:48:31 -04:00
parent bc40388914
commit 042f3b6a65
1 changed files with 3 additions and 0 deletions
@@ -89,6 +89,9 @@ public static class ServiceCollectionExtensions
            // appsettings (e.g. "ot-driver-operator": "DriverOperator").
            o.AddPolicy("DriverOperator", policy =>
                policy.RequireRole("DriverOperator", "FleetAdmin"));
+
+            // FleetAdmin: full administrative access; gates fleet-wide pages such as RoleGrants.
+            o.AddPolicy("FleetAdmin", policy => policy.RequireRole("FleetAdmin"));
        });

        return services;