Make compliance center work for sub-groups
What does this MR do and why?
This MR ensures that we're always using current group instead of top-level group when retrieving complianceFrameworks
This fixes the situation when owner of sub-group does not have permission for top-level group This allows users on sub-group compliance center to view, add, or remove compliance frameworks for their projects
MR acceptance checklist
Screenshots or screen recordings
How to set up and validate locally
- Create private group (for example
test
) - Create compliance framework there
- Create private sub-group
- Add user as a member of private sub-group (but not a member of top-level group)
- Open
secure -> compliance center
framework and go toprojects
tab - Observe frameworks list being available:
- when assigning framework via bulk action
- when assigning framework for single project via "Choose one framework" inside table
- when performing filtering using filtered search "compliance frameworks" token
Edited by Illya Klymov