diff --git a/src/core/utils.ts b/src/core/utils.ts index a69d032..a481cd8 100644 --- a/src/core/utils.ts +++ b/src/core/utils.ts @@ -178,9 +178,9 @@ export interface ReadPolicyResponse extends AccessResponse { // Create a ids client instance let idsClientInstance: UserServiceClient; +const cfg = createServiceConfig(process.cwd()); const getUserServiceClient = async () => { if (!idsClientInstance) { - const cfg = createServiceConfig(process.cwd()); // identity-srv client to resolve subject ID by token const grpcIDSConfig = cfg.get('client:user'); const loggerCfg = cfg.get('logger'); @@ -229,7 +229,7 @@ export async function checkAccessRequest(ctx: ACSClientContext, resource: Resour let result: DecisionResponse | PolicySetRQResponse; try { - result = await accessRequest(subject, resource, action, ctx, { operation }); + result = await accessRequest(subject, resource, action, ctx, { operation, roleScopingEntityURN: cfg?.get('authorization:urns:organization') }); } catch (err) { return { decision: Response_Decision.DENY,