From f50883a7f87908d7c545453008e9ff5d3452b307 Mon Sep 17 00:00:00 2001
From: Scot Wells <wells.scot@gmail.com>
Date: Thu, 1 Oct 2026 20:52:49 -0500
Subject: [PATCH] Keep fraud decisions and health under system control

---
 config/iam/protected-resources/fraudevaluation.yaml | 6 ++++++
 config/iam/protected-resources/fraudpolicy.yaml     | 6 ++++++
 config/iam/protected-resources/fraudprovider.yaml   | 6 ++++++
 3 files changed, 18 insertions(+)

diff --git a/config/iam/protected-resources/fraudevaluation.yaml b/config/iam/protected-resources/fraudevaluation.yaml
index 2e05304..50811ef 100644
--- a/config/iam/protected-resources/fraudevaluation.yaml
+++ b/config/iam/protected-resources/fraudevaluation.yaml
@@ -9,6 +9,12 @@ spec:
   kind: FraudEvaluation
   plural: fraudevaluations
   singular: fraudevaluation
+  subresources:
+    - name: status
+      permissions:
+        - get
+        - update
+        - patch
   permissions:
     - list
     - get
diff --git a/config/iam/protected-resources/fraudpolicy.yaml b/config/iam/protected-resources/fraudpolicy.yaml
index a220e76..e1971bb 100644
--- a/config/iam/protected-resources/fraudpolicy.yaml
+++ b/config/iam/protected-resources/fraudpolicy.yaml
@@ -9,6 +9,12 @@ spec:
   kind: FraudPolicy
   plural: fraudpolicies
   singular: fraudpolicy
+  subresources:
+    - name: status
+      permissions:
+        - get
+        - update
+        - patch
   permissions:
     - list
     - get
diff --git a/config/iam/protected-resources/fraudprovider.yaml b/config/iam/protected-resources/fraudprovider.yaml
index aa16a84..3805573 100644
--- a/config/iam/protected-resources/fraudprovider.yaml
+++ b/config/iam/protected-resources/fraudprovider.yaml
@@ -9,6 +9,12 @@ spec:
   kind: FraudProvider
   plural: fraudproviders
   singular: fraudprovider
+  subresources:
+    - name: status
+      permissions:
+        - get
+        - update
+        - patch
   permissions:
     - list
     - get