From e69a2087c1a06719aa570f59fede202f6bb797ae Mon Sep 17 00:00:00 2001
From: Ashraf Masarwa <asmasarw@redhat.com>
Date: Wed, 5 Aug 2026 12:53:55 +0300
Subject: [PATCH] Add Permissions to OC while running /app

---
 workspaces/dcm/Dockerfile | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/workspaces/dcm/Dockerfile b/workspaces/dcm/Dockerfile
index c04fad96f74..fef6ea03904 100644
--- a/workspaces/dcm/Dockerfile
+++ b/workspaces/dcm/Dockerfile
@@ -76,8 +76,12 @@ COPY --from=build /app/plugins/dcm-backend/config.d.ts plugins/dcm-backend/confi
 COPY --from=build /app/packages/app/dist packages/app/dist
 COPY app-config.yaml app-config.production.yaml ./
 
-RUN chown -R node:node /app
-USER node
+# Fix OpenShift arbitrary UID compatibility:
+# Set GID to 0 (root group) and mirror user permissions to group permissions (g=u)
+RUN chown -R node:0 /app && \
+    chmod -R g=u /app
+
+USER 1000
 
 EXPOSE 7007