site roles only if local token

CanDIG · Feb 4, 2025 · 6c55d89 · 6c55d89
1 parent c0899cb
commit 6c55d89
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/permissions_engine/permissions.rego b/permissions_engine/permissions.rego
@@ -13,10 +13,12 @@ else := false
 
 site_admin := data.calculate.site_admin if {
 	valid_token
+	data.idp.is_local_token
 }
 
 site_curator := data.calculate.site_curator if {
 	valid_token
+	data.idp.is_local_token
 }
 
 datasets := data.calculate.datasets if {