feat(worker): modify permissions to all worker for work towards updat…

…ing its status

router/middleware/perm/perm.go

@@ -100,6 +100,15 @@ func MustWorkerAuthToken() gin.HandlerFunc {
 			"worker": cl.Subject,
 		}).Debugf("verifying worker %s has a valid auth token", cl.Subject)
 
+		// global permissions bypass
+		if cl.IsAdmin {
+			logrus.WithFields(logrus.Fields{
+				"user": cl.Subject,
+			}).Debugf("user %s has platform admin permissions", cl.Subject)
+
+			return
+		}
+
 		switch cl.TokenType {
 		case constants.WorkerAuthTokenType, constants.WorkerRegisterTokenType:
 			return

router/worker.go

@@ -32,7 +32,7 @@ func WorkerHandlers(base *gin.RouterGroup) {
 		_worker := _workers.Group("/:worker")
 		{
 			_worker.GET("", wmiddleware.Establish(), worker.GetWorker)
-			_worker.PUT("", perm.MustPlatformAdmin(), wmiddleware.Establish(), worker.UpdateWorker)
+			_worker.PUT("", perm.MustPlatformAdmin(), perm.MustWorkerAuthToken(), wmiddleware.Establish(), worker.UpdateWorker)
 			_worker.POST("/refresh", perm.MustWorkerAuthToken(), wmiddleware.Establish(), worker.Refresh)
 			_worker.DELETE("", perm.MustPlatformAdmin(), wmiddleware.Establish(), worker.DeleteWorker)
 		} // end of worker endpoints