Arize-ai / phoenix

AI Observability & Evaluation
https://docs.arize.com/phoenix
Other
3.79k stars 281 forks source link

[auth][graphql] RBAC on mutations #4364

Closed mikeldking closed 1 month ago

mikeldking commented 2 months ago

admin: create system api keys, delete user keys, user CRUD

should be blocked by IsAdmin strawberry permissions

mikeldking commented 1 month ago

I think it might be worth constructing a permission matrix that we can just put in our docs I'm guessing.