Rule index org allow expansion

Emyrk · Emyrk · commit 0ef4b5cb513e · 2023-02-09T15:29:12.000-06:00
diff --git a/coderd/rbac/policy.rego b/coderd/rbac/policy.rego
@@ -93,6 +93,8 @@ default scope_org := 0
 scope_org := org_allow([input.scope])
 
 org_allow(roles) := num {
+	# Rule index on org_owner being set.
+	input.object.org_owner != ""
 	allow := { id: num |
 		id := org_members[_]
 		set := { x |
