WIP
OVERVIEW
...
| Code Block |
|---|
PERMISSION_READ_SETTINGS PERMISSION_LIST_PRIVATE_TEAMS PERMISSION_JOIN_PRIVATE_TEAMS PERMISSION_READ_SYSCONSOLE_REPORTING PERMISSION_READ_SYSCONSOLE_USERMANAGEMENT PERMISSION_READ_SYSCONSOLE_ENVIRONMENT PERMISSION_READ_SYSCONSOLE_SITE PERMISSION_READ_SYSCONSOLE_AUTHENTICATION PERMISSION_READ_SYSCONSOLE_PLUGINS PERMISSION_READ_SYSCONSOLE_INTEGRATIONS PERMISSION_READ_SYSCONSOLE_COMPLIANCE PERMISSION_READ_SYSCONSOLE_EXPERIMENTAL```EXPERIMENTAL |
Junior Admin:
| Code Block |
|---|
PERMISSION_READ_SETTINGS.Id, PERMISSION_WRITE_SETTINGS.Id, PERMISSION_MANAGE_JOBS PERMISSION_LIST_PRIVATE_TEAMS PERMISSION_JOIN_PRIVATE_TEAMS PERMISSION_READ_SYSCONSOLE_REPORTING PERMISSION_WRITE_SYSCONSOLE_REPORTING PERMISSION_READ_SYSCONSOLE_USERMANAGEMENT PERMISSION_WRITE_SYSCONSOLE_USERMANAGEMENT PERMISSION_READ_SYSCONSOLE_ENVIRONMENT PERMISSION_WRITE_SYSCONSOLE_ENVIRONMENT PERMISSION_READ_SYSCONSOLE_SITE PERMISSION_WRITE_SYSCONSOLE_SITE PERMISSION_READ_SYSCONSOLE_AUTHENTICATION PERMISSION_WRITE_SYSCONSOLE_AUTHENTICATION PERMISSION_READ_SYSCONSOLE_PLUGINS PERMISSION_WRITE_SYSCONSOLE_PLUGINS PERMISSION_READ_SYSCONSOLE_INTEGRATIONS PERMISSION_WRITE_SYSCONSOLE_INTEGRATIONS |
...
Most API calls that were previously gated by the MANAGE_SYSTEM permission are now gated by the READ_* permissions for the get() calls and WRITE_* permission for the create, patch and update calls.
If we need to have more granular access to an API method that corresponds to the functionality of a sub-section in the System Console (like in the User Manager case), we will gate those calls on a case by case (a single panel functionality in the System Console panel can map to one or more API calls).
Permissions
See changes detailed above
Schema
No schema changes
REST API
The following API methods will have their gating functionality changes, as follows:
Performance
No performance degradation expected.
Plugins
CREDITS
Thanks to