diff --git a/api/services/enterprise/rbac_service.py b/api/services/enterprise/rbac_service.py index ff790b1690c..ee51fd52df7 100644 --- a/api/services/enterprise/rbac_service.py +++ b/api/services/enterprise/rbac_service.py @@ -435,6 +435,7 @@ _LEGACY_APP_EDITOR_KEYS: list[str] = [ "app.acl.delete", "app.acl.release_and_version", "app.acl.monitor", + "app.acl.log_and_annotation", "app.acl.access_config", ] diff --git a/api/tests/unit_tests/services/enterprise/test_rbac_service.py b/api/tests/unit_tests/services/enterprise/test_rbac_service.py index bb462588851..b491e3833f8 100644 --- a/api/tests/unit_tests/services/enterprise/test_rbac_service.py +++ b/api/tests/unit_tests/services/enterprise/test_rbac_service.py @@ -633,6 +633,8 @@ class TestMyPermissions: assert "dataset.acl.preview" in out.workspace.permission_keys assert "app.acl.preview" in out.app.default_permission_keys assert "dataset.acl.preview" in out.dataset.default_permission_keys + if role == "editor": + assert "app.acl.log_and_annotation" in out.app.default_permission_keys @pytest.mark.parametrize( ("role", "expected_snippet_keys"),