diff --git a/.changeset/quick-schools-grin.md b/.changeset/quick-schools-grin.md new file mode 100644 index 0000000000..a659a1bcb2 --- /dev/null +++ b/.changeset/quick-schools-grin.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-catalog-backend': patch +--- + +Fixed an issue occurred when authorizing permissions using custom rules passed via the `PermissionsRegistryService`. diff --git a/plugins/catalog-backend/src/service/CatalogBuilder.ts b/plugins/catalog-backend/src/service/CatalogBuilder.ts index fe7f9d8bb5..99752ca5cf 100644 --- a/plugins/catalog-backend/src/service/CatalogBuilder.ts +++ b/plugins/catalog-backend/src/service/CatalogBuilder.ts @@ -557,7 +557,13 @@ export class CatalogBuilder { const entitiesCatalog = new AuthorizedEntitiesCatalog( unauthorizedEntitiesCatalog, permissionsService, - createConditionTransformer(this.permissionRules), + permissionsRegistry + ? createConditionTransformer( + permissionsRegistry.getPermissionRuleset( + catalogEntityPermissionResourceRef, + ), + ) + : createConditionTransformer(this.permissionRules), ); const getResources = async (resourceRefs: string[]) => {