Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add ability to create custom roles for site + orgs #13226

Open
1 of 4 tasks
Emyrk opened this issue May 10, 2024 · 0 comments
Open
1 of 4 tasks

Add ability to create custom roles for site + orgs #13226

Emyrk opened this issue May 10, 2024 · 0 comments
Assignees
Labels
feature Something we don't have yet
Milestone

Comments

@Emyrk
Copy link
Member

Emyrk commented May 10, 2024

Currently all roles are statically defined: https://github.com/coder/coder/blob/main/coderd/rbac/roles.go#L227-L227

Creating custom roles means to store dynamic roles in the database.

  • Add more verbs than CRUD to remove pseudo-resources
    • Pseudo rbac resources are a consequence of a fixed set of verbs (CRUD). Expanding the allowed verbs would remove the need for these resources, making custom roles more easily defined. Custom roles need to make sense of the verbs, as now verbs will be exposed to users (not just devs). Intuitive verbs provide more value to ensure consistent behavior with expectations. chore: remove rbac psuedo resources, add custom verbs #13276
  • What roles can assign what other roles is currently statically defined. This needs to accommodate dynamic roles
  • Add creating org scoped roles. Likely some sort of checkbox based approach to selecting which permissions are apart of some custom role. feat: add cli command to edit custom roles #13305

Frontend

  • Custom role builder
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature Something we don't have yet
Projects
None yet
Development

No branches or pull requests

1 participant