Instance Protection Mode

MarianRaphael commented 9 months ago

Description

User Story

As a FlowFuse Team Owner, I want the ability to restrict modifications to production instances exclusively to Owners, so that changes to any protected/productive instance require authorization from an Owner, ensuring controlled and secure updates.

Scope

Introduce a Protected Mode setting within Instance Settings to safeguard production instances.

Implement a button/switch within Instance Settings to activate or deactivate Protected Mode.

Functionality in Protected Mode:

Editor Restrictions: The instance editor can only be accessed in viewer mode as an owner to prevent unauthorized modifications. Member and viewer team members still get viewer access.
DevOps Pipeline Execution Control: Only Owners can initiate and execute pipelines targeting a protected instance, ensuring that critical environments are modified under strict supervision.

Which customers would this be available to

Team + Enterprise Tiers (EE)

Have you provided an initial effort estimate for this issue?

I have provided an initial effort estimate

MarianRaphael commented 9 months ago

Customer request: https://github.com/FlowFuse/flowfuse/issues/3093#issuecomment-1830293431

hardillb commented 8 months ago

I think this needs to be broken into 2 separate items

viewer only editor access for owner, all others blocked
Dev Pipeline work

hardillb commented 8 months ago

@MarianRaphael just double checking the first point.

Do member and viewer team members still get viewer access to a protected instance or does this totally cut them off from this instance?

hardillb commented 8 months ago

@MarianRaphael I need an answer to the ^ question or I'll be blocked today.

Thanks.

MarianRaphael commented 8 months ago

member and viewer team members still get viewer access

robmarcer commented 8 months ago

This is for https://app-eu1.hubspot.com/contacts/26586079/record/0-1/3228251

Steve-Mcl commented 8 months ago

Checked NR editor access is restricted. Checked session token is revoked when protection is toggled. Checked owner can still operate pipeline

Last thing to check is non owner cannot operate pipeline Member Invite sent to Ben for "Steve on Staging" team, application funny-crested-lark-6873

Steve-Mcl commented 8 months ago

Last thing to check is non owner cannot operate pipeline Member Invite sent to Ben for "Steve on Staging" team, application funny-crested-lark-6873

@hardillb verified

FlowFuse / flowfuse