From f1a690462fffe04f3bb7273e0257d66a19cb6158 Mon Sep 17 00:00:00 2001
From: Radoslav Dimitrov <radoslav@stacklok.com>
Date: Tue, 9 Jul 2024 18:30:13 +0300
Subject: [PATCH] Update openfga entity_reconcile to require the admin role
 (#3818)

Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
---
 internal/authz/model/minder.fga | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/authz/model/minder.fga b/internal/authz/model/minder.fga
index 1dbe168d73..2a51975c48 100644
--- a/internal/authz/model/minder.fga
+++ b/internal/authz/model/minder.fga
@@ -66,7 +66,7 @@ type project
 
     define remote_repo_get: admin
 
-    define entity_reconcile: editor
+    define entity_reconcile: admin
 
     define artifact_get: viewer
     define artifact_create: editor