From 4d1f4828b383e44307988250d2cbff0c94abc9e0 Mon Sep 17 00:00:00 2001
From: Todd <github@quaddi.com>
Date: Mon, 25 Mar 2024 16:49:59 -0700
Subject: [PATCH] Add default permissions for reading/listing aliases

---
 internal/cmd/base/initial_resources.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/internal/cmd/base/initial_resources.go b/internal/cmd/base/initial_resources.go
index d559281e7c..bb531e2fb0 100644
--- a/internal/cmd/base/initial_resources.go
+++ b/internal/cmd/base/initial_resources.go
@@ -114,6 +114,7 @@ func (b *Server) CreateInitialAuthenticatedUserRole(ctx context.Context, opt ...
 		"ids=*;type=auth-token;actions=list",
 		"ids={{.Account.Id}};actions=read,change-password",
 		"ids=*;type=session;actions=list,read:self,cancel:self",
+		"ids=*;type=alias;actions=list,read",
 	}
 	opts := GetOpts(opt...)
 	if opts.withAuthUserTargetAuthorizeSessionGrant {