search

sourcegraph / sourcegraph-public-snapshot

Code AI platform with Code Search & Cody
https://sourcegraph.com
Other
10.11k stars 1.29k forks source link

License management without site-admin role - discovery #21055

Open RafLeszczynski opened 3 years ago

RafLeszczynski commented 3 years ago

Context

In order to implement a policy of least privilege in sourcegraph.com, we need to devise an alternative solution to CEs and AEs needing full site-admin access to manage licenses. These licenses for on-prem customer deployments are currently managed in https://sourcegraph.com/site-admin/dotcom/product/subscriptions.

Ripping out this whole system from the main product is likely a larger effort. Introducing a separate role that allows for license management without full site admin access is likely the best course of action currently. This would be the beginning of introducing more specific roles in our authorization system (i.e. RBAC).

tsenart commented 3 years ago

@RafLeszczynski: Added context. Please label accordingly.