fix: provide roleScopingEntityURN in config

restorecommerce · Mar 14, 2024 · 89f570b · 89f570b
1 parent 6d2b170
commit 89f570b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/core/utils.ts b/src/core/utils.ts
@@ -178,9 +178,9 @@ export interface ReadPolicyResponse extends AccessResponse {
 
 // Create a ids client instance
 let idsClientInstance: UserServiceClient;
+const cfg = createServiceConfig(process.cwd());
 const getUserServiceClient = async () => {
   if (!idsClientInstance) {
-    const cfg = createServiceConfig(process.cwd());
     // identity-srv client to resolve subject ID by token
     const grpcIDSConfig = cfg.get('client:user');
     const loggerCfg = cfg.get('logger');
@@ -229,7 +229,7 @@ export async function checkAccessRequest(ctx: ACSClientContext, resource: Resour
 
   let result: DecisionResponse | PolicySetRQResponse;
   try {
-    result = await accessRequest(subject, resource, action, ctx, { operation });
+    result = await accessRequest(subject, resource, action, ctx, { operation, roleScopingEntityURN: cfg?.get('authorization:urns:organization') });
   } catch (err) {
     return {
       decision: Response_Decision.DENY,