Workspace viewer role - Githubissues

AzBuilder / terrakube

Open source IaC Automation and Collaboration Software.

https://docs.terrakube.io

Apache License 2.0

523 stars 44 forks source link

Workspace viewer role #1332

Open KamranBiglari opened 1 month ago

KamranBiglari commented 1 month ago

Feature description 💡

Is it possible to add a feature to have viewer role for workspace? I want to have a team with least permission to just view and read the state without writing/modifying or execute.

OTF has this feature: https://docs.otf.ninja/latest/rbac/#permissions

Anything else?

No response

alfespa17 commented 1 month ago

Hello @KamranBiglari

If you add a team and you unselect all options and just click save it will be like a reader role, I think that should work for you

alfespa17 commented 1 month ago

From Terrakube 2.23.0-beta.3 there is a new permission called "Manage State"

Once disable you wont be able to see the state in the UI.

alfespa17 commented 1 month ago

Additionally if you disable "Manage State" all options will be disabled in this page

And if you try to run a job from the UI you will get a 403 error

This needs to be improve to be more "friendly in the UI"