feat: add public RBAC scope catalog for user-requestable permissions#19913
Merged
Conversation
This was referenced Sep 22, 2025
Member
Author
fdb2822 to
4f64c51
Compare
This was referenced Sep 22, 2025
4f64c51 to
caa7377
Compare
6de9975 to
99afbd9
Compare
caa7377 to
bf1e4e9
Compare
99afbd9 to
6a22bcc
Compare
Emyrk
reviewed
Sep 22, 2025
Member
Emyrk
left a comment
There was a problem hiding this comment.
The name PublicLowLevel feels strange. We could probably just call it Public? Or External to mirror the Internal language you have in the comments.
6a22bcc to
2dc79e0
Compare
bf1e4e9 to
76ae5ab
Compare
Member
Author
I updated it to
I don't really have a preference here. When I initially named it, I was thinking of |
2dc79e0 to
92537e5
Compare
76ae5ab to
f1eed85
Compare
92537e5 to
4810c5e
Compare
c96c93d to
0ae1500
Compare
4810c5e to
6d04e1c
Compare
b7ba894 to
f8099fd
Compare
6d04e1c to
49feb2d
Compare
f8099fd to
fbe5b58
Compare
eddb2a7 to
ab8574e
Compare
bff79c8 to
62cab0f
Compare
ab8574e to
cffaa05
Compare
62cab0f to
5ede22e
Compare
cffaa05 to
84de60e
Compare
5ede22e to
efcde0d
Compare
84de60e to
adb7521
Compare
efcde0d to
7b2678b
Compare
8e56891 to
2cddda5
Compare
6258186 to
4f84ffa
Compare
Emyrk
approved these changes
Sep 25, 2025
Add public low-level scope catalog to RBAC system with curated set of user-requestable scopes. Includes workspace, template, API key, file, personal user, and user secret scopes. Updates scope checking documentation to reference new catalog location in rbac package.
4f84ffa to
6466375
Compare
Member
Author
Merge activity
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Add a curated catalog of public RBAC scopes
This PR introduces a curated catalog of public RBAC scopes that are exposed to users. It adds:
publicLowLevelmap inscopes_catalog.gothat defines which resource:action pairs are user-requestableIsPublicLowLevel()function to check if a scope is in the public catalogPublicLowLevelScopeNames()function that returns a sorted list of public scopesThis change helps distinguish between internal-only scopes and those that should be exposed to users in the API.