editor can also create api key (#8214)

2024-09-11 16:07:15 +08:00
parent 678bbf8fe8
commit c5b3777d93
2 changed files with 3 additions and 3 deletions
--- a/api/controllers/console/apikey.py
+++ b/api/controllers/console/apikey.py
@@ -57,7 +57,7 @@ class BaseApiKeyListResource(Resource):
    def post(self, resource_id):
        resource_id = str(resource_id)
        _get_resource(resource_id, current_user.current_tenant_id, self.resource_model)
-        if not current_user.is_admin_or_owner:
+        if not current_user.is_editor:
            raise Forbidden()

        current_key_count = (