chore: Remove template-admin can create/update/delete workspaces (#4280)

Emyrk · web-flow · commit 4919975f137f · 2022-10-02T18:54:57.000-04:00
Cannot crud someone else's workspace
diff --git a/coderd/rbac/builtin.go b/coderd/rbac/builtin.go
@@ -111,7 +111,7 @@ var (
 					ResourceTemplate: {ActionCreate, ActionRead, ActionUpdate, ActionDelete},
 					// CRUD all files, even those they did not upload.
 					ResourceFile:      {ActionCreate, ActionRead, ActionUpdate, ActionDelete},
-					ResourceWorkspace: {ActionCreate, ActionRead, ActionUpdate, ActionDelete},
+					ResourceWorkspace: {ActionRead},
 					// CRUD to provisioner daemons for now.
 					ResourceProvisionerDaemon: {ActionCreate, ActionRead, ActionUpdate, ActionDelete},
 				}),
