Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

feat: remove site wide perms from creating a workspace#17296

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Merged
Emyrk merged 9 commits intomainfromstevenmasley/workspace_authz_story
Apr 9, 2025

Conversation

Emyrk
Copy link
Member

@EmyrkEmyrk commentedApr 8, 2025
edited
Loading

Creating a workspace requiredread on site wideuser.
Only organization permissions should be required.

Added unit tests to assert this

Permissions required to create a workspace for another user. We might want to revist the required permissions at some point.

OrganizationPermissions:codersdk.CreatePermissions(map[codersdk.RBACResource][]codersdk.RBACAction{
codersdk.ResourceWorkspace: {codersdk.ActionCreate,codersdk.ActionWorkspaceStart,codersdk.ActionUpdate,codersdk.ActionRead},
codersdk.ResourceOrganizationMember: {codersdk.ActionRead},
}),

Creating a workspace requires `read` on site wide `user`.Added unit tests to assert this
@EmyrkEmyrk requested a review fromaslilacApril 8, 2025 18:07
@EmyrkEmyrk merged commit0b58798 intomainApr 9, 2025
29 checks passed
@EmyrkEmyrk deleted the stevenmasley/workspace_authz_story branchApril 9, 2025 19:35
@github-actionsgithub-actionsbot locked and limited conversation to collaboratorsApr 9, 2025
@stirby
Copy link
Collaborator

/cherry-pick release/2.21

@matifali
Copy link
Member

/cherry-pick release/2.20

Sign up for freeto subscribe to this conversation on GitHub. Already have an account?Sign in.
Reviewers

@aslilacaslilacaslilac approved these changes

Assignees

@EmyrkEmyrk

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

4 participants
@Emyrk@stirby@matifali@aslilac

[8]ページ先頭

©2009-2025 Movatter.jp