AzBuilder / terrakube

Open source IaC Automation and Collaboration Software.
https://docs.terrakube.io
Apache License 2.0
523 stars 44 forks source link

Team permissions by workspace #1498

Open juan-vg opened 1 week ago

juan-vg commented 1 week ago

Feature description 💡

Currently TFC allows to set different permissions for different teams per each workspace. In this way, a team can be admin (or have write permissions, without fully admin) on some workspaces where the team is owner, while at the same have only read permissions on other workspaces where they're not owners. So to recap:

Anything else?

It would be awesome to make the permissions more granular. Instead of just read/write, I would like to have read/write/admin. In fact, it would be even better to be able to customize every action possible (I mean, manage a workspace implies many actions that are all allowed at the same time when the manage permission is enabled), so with just read/write for each action we could define different roles that could achieve the read/write/admin and even more combinations.

jordanjthomas commented 1 week ago

+1 This is definitely needed. Looking to move our Enterprise from TFC to Terrakube and this is going to be a major pain point in convincing teams to adopt it.