From ec51aae1eb64e0a9dbf1103f89a74d81cf709bc7 Mon Sep 17 00:00:00 2001 From: William Phetsinorath Date: Fri, 4 Sep 2026 11:11:19 +0200 Subject: [PATCH] =?UTF-8?q?feat(server-nestjs):=20add=20S=C3=A9curit=C3=A9?= =?UTF-8?q?=20role=20to=20project=20system?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: William Phetsinorath Change-Id: I57d3e8b3b12000b340d24c54e8223a446a6a6964 --- .../src/modules/project/project.service.spec.ts | 4 ++-- apps/server-nestjs/src/modules/project/project.utils.ts | 9 +++++++++ 2 files changed, 11 insertions(+), 2 deletions(-) diff --git a/apps/server-nestjs/src/modules/project/project.service.spec.ts b/apps/server-nestjs/src/modules/project/project.service.spec.ts index e07ae9b900..2871d4dbd3 100644 --- a/apps/server-nestjs/src/modules/project/project.service.spec.ts +++ b/apps/server-nestjs/src/modules/project/project.service.spec.ts @@ -76,7 +76,7 @@ describe('projectService', () => { prisma.$transaction.mockImplementation(async cb => cb(tx)) const pwd = makeProjectWithDetails({ slug: expectedSlug }) - pwd.roles = Array.from({ length: 4 }, (_, index) => ({ + pwd.roles = Array.from({ length: 5 }, (_, index) => ({ id: faker.string.uuid(), name: `role-${index}`, permissions: 0n, @@ -100,7 +100,7 @@ describe('projectService', () => { userId, requestId, }) - expect(logs.addLog).toHaveBeenCalledTimes(4) + expect(logs.addLog).toHaveBeenCalledTimes(5) expect(result).toBeDefined() expect(result.slug).toBe(expectedSlug) }) diff --git a/apps/server-nestjs/src/modules/project/project.utils.ts b/apps/server-nestjs/src/modules/project/project.utils.ts index bb50d21fdf..e00fd09623 100644 --- a/apps/server-nestjs/src/modules/project/project.utils.ts +++ b/apps/server-nestjs/src/modules/project/project.utils.ts @@ -71,6 +71,15 @@ export function generateProjectCreateInput( oidcGroup: `/${slug}/console/readonly`, type: 'system:managed', }, + { + name: 'Sécurité', + permissions: PROJECT_PERMS.SEE_SECRETS + | PROJECT_PERMS.LIST_ENVIRONMENTS + | PROJECT_PERMS.LIST_REPOSITORIES, + position: 4, + oidcGroup: `/${slug}/console/security`, + type: 'system:managed', + }, ], }, }