From a57fae636d3d39efc16d3591961e5f69f5c326f7 Mon Sep 17 00:00:00 2001
From: Caleb Burke <calebburke91@gmail.com>
Date: Sat, 20 Jun 2026 00:21:33 -0700
Subject: [PATCH] Policy fix

---
 api/src/policies/users-policy.ts | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/api/src/policies/users-policy.ts b/api/src/policies/users-policy.ts
index edca2d3..e0344a3 100644
--- a/api/src/policies/users-policy.ts
+++ b/api/src/policies/users-policy.ts
@@ -50,13 +50,12 @@ export class UsersPolicy extends PolicyFactory(User) {
   }
 
   permittedAttributes(): Path[] {
-    const attributes: (keyof Attributes<User>)[] = [
-      "email",
-      "auth0Subject",
-      "firstName",
-      "lastName",
-      "displayName",
-    ]
+    const attributes: (keyof Attributes<User>)[] = ["email", "firstName", "lastName", "displayName"]
+
+    if (this.user.isSystemAdmin) {
+      attributes.push("roles")
+      attributes.push("auth0Subject")
+    }
 
     return attributes
   }