diff --git a/bundle/permissions/workspace_root.go b/bundle/permissions/workspace_root.go index 4b84a0bbc..10e85c9b5 100644 --- a/bundle/permissions/workspace_root.go +++ b/bundle/permissions/workspace_root.go @@ -88,9 +88,6 @@ func getWorkspaceObjectPermissionLevel(bundlePermission string) (workspace.Works // checkWorkspaceRootPermissions checks that if permissions are set for the workspace root, and workspace root starts with /Workspace/Shared, then permissions should be set for group: users func checkWorkspaceRootPermissions(b *bundle.Bundle) diag.Diagnostics { var diags diag.Diagnostics - if len(b.Config.Permissions) == 0 { - return nil - } if !strings.HasPrefix(b.Config.Workspace.RootPath, "/Workspace/Shared/") { return nil @@ -106,7 +103,7 @@ func checkWorkspaceRootPermissions(b *bundle.Bundle) diag.Diagnostics { if !allUsers { diags = diags.Append(diag.Diagnostic{ Severity: diag.Warning, - Summary: "workspace_root_permissions", + Summary: fmt.Sprintf("the bundle root path %s is writable by all workspace users", b.Config.Workspace.RootPath), Detail: "bundle is configured to /Workspace/Shared, which will give read/write access to all users. If all users should have access, add CAN_MANAGE for 'group_name: users' permission to your bundle configuration. If the deployment should be restricted, move it to a restricted folder such as /Users/", }) }