diff --git a/src/Umbraco.Web.BackOffice/DependencyInjection/UmbracoBuilder.BackOfficeAuth.cs b/src/Umbraco.Web.BackOffice/DependencyInjection/UmbracoBuilder.BackOfficeAuth.cs index 97722d830576..bfd460bda497 100644 --- a/src/Umbraco.Web.BackOffice/DependencyInjection/UmbracoBuilder.BackOfficeAuth.cs +++ b/src/Umbraco.Web.BackOffice/DependencyInjection/UmbracoBuilder.BackOfficeAuth.cs @@ -329,6 +329,12 @@ private static void CreatePolicies(AuthorizationOptions options, string backOffi policy.Requirements.Add(new TreeRequirement(Constants.Trees.LogViewer)); }); + options.AddPolicy(AuthorizationPolicies.TreeAccessWebhooks, policy => + { + policy.AuthenticationSchemes.Add(backOfficeAuthenticationScheme); + policy.Requirements.Add(new TreeRequirement(Constants.Trees.Webhooks)); + }); + options.AddPolicy(AuthorizationPolicies.TreeAccessDataTypes, policy => { policy.AuthenticationSchemes.Add(backOfficeAuthenticationScheme); diff --git a/src/Umbraco.Web.BackOffice/Trees/WebhooksTreeController.cs b/src/Umbraco.Web.BackOffice/Trees/WebhooksTreeController.cs index c8a7f7707c76..5767846f8d2f 100644 --- a/src/Umbraco.Web.BackOffice/Trees/WebhooksTreeController.cs +++ b/src/Umbraco.Web.BackOffice/Trees/WebhooksTreeController.cs @@ -10,7 +10,7 @@ namespace Umbraco.Cms.Web.BackOffice.Trees; -[Authorize(Policy = AuthorizationPolicies.TreeAccessLogs)] +[Authorize(Policy = AuthorizationPolicies.TreeAccessWebhooks)] [Tree(Constants.Applications.Settings, Constants.Trees.Webhooks, SortOrder = 9, TreeGroup = Constants.Trees.Groups.Settings)] [PluginController(Constants.Web.Mvc.BackOfficeTreeArea)] [CoreTree] diff --git a/src/Umbraco.Web.Common/Authorization/AuthorizationPolicies.cs b/src/Umbraco.Web.Common/Authorization/AuthorizationPolicies.cs index 50e399d4f0d1..cfad020a925f 100644 --- a/src/Umbraco.Web.Common/Authorization/AuthorizationPolicies.cs +++ b/src/Umbraco.Web.Common/Authorization/AuthorizationPolicies.cs @@ -50,6 +50,7 @@ public static class AuthorizationPolicies public const string TreeAccessDataTypes = nameof(TreeAccessDataTypes); public const string TreeAccessPackages = nameof(TreeAccessPackages); public const string TreeAccessLogs = nameof(TreeAccessLogs); + public const string TreeAccessWebhooks = nameof(TreeAccessWebhooks); public const string TreeAccessTemplates = nameof(TreeAccessTemplates); public const string TreeAccessDictionary = nameof(TreeAccessDictionary); public const string TreeAccessRelationTypes = nameof(TreeAccessRelationTypes);