From 45473e3ecef78e62ff5ff4a6da3b6792397b2a87 Mon Sep 17 00:00:00 2001 From: flyinghermit Date: Mon, 28 Oct 2024 14:25:15 -0400 Subject: [PATCH] add todo comment --- lib/auth/auth_with_roles.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/lib/auth/auth_with_roles.go b/lib/auth/auth_with_roles.go index c896a74a4b346..a4635340009dd 100644 --- a/lib/auth/auth_with_roles.go +++ b/lib/auth/auth_with_roles.go @@ -1264,6 +1264,9 @@ func (c *resourceAccess) checkAccess(resource types.ResourceWithLabels, filter s } // KindSAMLIdPServiceProvider does not support label matcher + // TODO(sshah): remove this exclusion once we introduce role v8 and ability + // to enforce label matcher only for roles v8. + // https://github.com/gravitational/teleport/pull/47912 if resourceKind == types.KindSAMLIdPServiceProvider { return true, nil }