Add new nimbus updater role.

pinterest · Sep 4, 2024 · c620273 · c620273
1 parent 474a58e
commit c620273
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/...service/common/src/main/java/com/pinterest/deployservice/bean/TeletraanPrincipalRole.java b/...service/common/src/main/java/com/pinterest/deployservice/bean/TeletraanPrincipalRole.java
@@ -54,6 +54,8 @@ private Names() {}
         public static final String WRITE = "WRITE";
         public static final String EXECUTE = "EXECUTE";
         public static final String DELETE = "DELETE";
+
+        public static final String NIMBUS_EXTERNAL_ID_UPDATER = "NIMBUS_EXTERNAL_ID_UPDATER";
     }
 
     private final ValueBasedRole role;

diff --git a/...oy-service/teletraanservice/src/main/java/com/pinterest/teletraan/resource/EnvStages.java b/...oy-service/teletraanservice/src/main/java/com/pinterest/teletraan/resource/EnvStages.java
@@ -213,7 +213,7 @@ public void delete(
             notes = "Sets the external_id column on a stage given the environment and stage names",
             response = EnvironBean.class)
     @Path("/external_id")
-    @RolesAllowed(TeletraanPrincipalRole.Names.WRITE)
+    @RolesAllowed({TeletraanPrincipalRole.Names.WRITE, TeletraanPrincipalRole.Names.NIMBUS_EXTERNAL_ID_UPDATER})
     @ResourceAuthZInfo(
             type = AuthZResource.Type.ENV_STAGE,
             idLocation = ResourceAuthZInfo.Location.PATH)