cloud: allow access to maintenance resource

Author: jkralik

service/grpc/onboardDevice.go

@@ -27,6 +27,7 @@ import (
 	"github.com/plgd-dev/device/v2/schema"
 	"github.com/plgd-dev/device/v2/schema/acl"
 	"github.com/plgd-dev/device/v2/schema/cloud"
+	"github.com/plgd-dev/device/v2/schema/maintenance"
 	"github.com/plgd-dev/device/v2/schema/softwareupdate"
 	"github.com/plgd-dev/kit/v2/security"
 	"google.golang.org/grpc/codes"
@@ -59,6 +60,12 @@ func setACLForCloud(ctx context.Context, p *core.ProvisioningClient, cloudID str
 			Interfaces: []string{"*"},
 		})
 	}
+	for _, href := range links.GetResourceHrefs(maintenance.ResourceType) {
+		confResources = append(confResources, acl.Resource{
+			Href:       href,
+			Interfaces: []string{"*"},
+		})
+	}
 
 	cloudACL := acl.UpdateRequest{
 		AccessControlList: []acl.AccessControl{