Update rbac.py

project-koku · Apr 5, 2024 · cf26bfd · cf26bfd
1 parent 7949128
commit cf26bfd
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/koku/koku/rbac.py b/koku/koku/rbac.py
@@ -108,10 +108,10 @@ def _update_access_obj(access, res_access, resource_list):
         access_items = access.get(res, [])
         # Set OpenShift rbac inheritance cluster->node->project if higher level is restricted
         if res == "openshift.node":
-            if not access_items and res_access["openshift.cluster"]:
+            if not access_items and res_access["openshift.cluster"]["read"] != []:
                 access_items = [{"operation": "read", "resources": ["*"]}]
         if res == "openshift.project":
-            if not access_items and res_access["openshift.node"]:
+            if not access_items and res_access["openshift.node"]["read"] != []:
                 access_items = [{"operation": "read", "resources": ["*"]}]
         for access_item in access_items:
             operation = _get_operation(access_item, res)