diff --git a/ZB.MOM.WW.Secrets/Directory.Build.props b/ZB.MOM.WW.Secrets/Directory.Build.props index 3d9b855..456ba04 100644 --- a/ZB.MOM.WW.Secrets/Directory.Build.props +++ b/ZB.MOM.WW.Secrets/Directory.Build.props @@ -5,7 +5,7 @@ enable enable latest - 0.1.0 + 0.1.1 true README.md diff --git a/ZB.MOM.WW.Secrets/src/ZB.MOM.WW.Secrets.Ui/SecretsAuthorization.cs b/ZB.MOM.WW.Secrets/src/ZB.MOM.WW.Secrets.Ui/SecretsAuthorization.cs index 719885e..df96355 100644 --- a/ZB.MOM.WW.Secrets/src/ZB.MOM.WW.Secrets.Ui/SecretsAuthorization.cs +++ b/ZB.MOM.WW.Secrets/src/ZB.MOM.WW.Secrets.Ui/SecretsAuthorization.cs @@ -1,4 +1,5 @@ using Microsoft.AspNetCore.Authorization; +using ZB.MOM.WW.Auth.Abstractions.Roles; using ZB.MOM.WW.Auth.AspNetCore; namespace ZB.MOM.WW.Secrets.Ui; @@ -46,8 +47,13 @@ public static class SecretsAuthorization /// Role that grants secret value reveal (satisfies both and ). public const string RevealRole = "secrets-reveal"; - /// Administrator role that satisfies every secrets policy. - public const string AdminRole = "administrator"; + /// + /// Administrator role that satisfies every secrets policy. Uses the family's canonical + /// role name ("Administrator") so an existing + /// admin principal satisfies the secrets policies without a separate mapping. Role-claim + /// values are compared case-sensitively, so the exact canonical spelling matters. + /// + public const string AdminRole = nameof(CanonicalRole.Administrator); /// /// Registers the and policies on the