Victor Lyuboslavsky 4e7c2e5715 Fixed team maintainers, admins, and GitOps users being unable to add certificate templates (#41740) ... <!-- Add the related story/sub-task/bug number, like Resolves #123, or remove if NA --> **Related issue:** Resolves #39308 Doc updates: https://github.com/fleetdm/fleet/pull/41760/changes The reason secrets are involved here is because `gitops generate` can get them. # Checklist for submitter If some of the following don't apply, delete the relevant line. - [x] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. ## Testing - [x] Added/updated automated tests - [x] QA'd all new/changed functionality manually <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit ## Release Notes * **Bug Fixes** * Fixed access permissions for team maintainers, admins, and GitOps users, enabling them to add certificate templates by granting required read access to certificate authorities. <!-- end of auto-generated comment: release notes by coderabbit.ai -->		2026-03-16 12:24:31 -05:00
..
authz.go	Activity bounded context: /api/latest/fleet/activities (1 of 2) (#38115)	2026-01-19 09:07:14 -05:00
errors.go	Fixed client-side errors being incorrectly reported as server errors in OTEL telemetry (#40051)	2026-02-19 16:06:00 -06:00
policy.rego	Fixed team maintainers, admins, and GitOps users being unable to add certificate templates (#41740)	2026-03-16 12:24:31 -05:00
policy_test.go	Fixed team maintainers, admins, and GitOps users being unable to add certificate templates (#41740)	2026-03-16 12:24:31 -05:00
policy_test.rego	Add authorization checks in service (#938)	2021-06-03 16:24:15 -07:00