Improved Permission System with Resource-Based Access Control

[NrwPlay]

Hello Coolify Team,
First of all: thank you for your great work on Coolify, it’s an amazing platform!

I would like to propose an enhancement for the permission system. Right now, the user and team management is quite limited when it comes to fine-grained access control.

Feature Suggestion

Implement a more advanced permission system that allows admins to:

• Create groups or roles.
• Assign specific permissions to groups/roles.
• Control access per resource (e.g., individual applications, services, environments, projects, secrets, databases, etc.).
• Assign users to one or multiple groups.

Example

• Group "Frontend Developers" → Access to Project A (Frontend Deployment)
• Group "Backend Developers" → Access to Project B (Backend Deployment & Database)
• Group "Admins" → Full access
• Person A -> Can View Project A B C
• Persion B -> Can View All Projects

Why this would be helpful

• More flexible team management.
• Better security by following the "least privilege principle."
• Easier onboarding of new team members.
• More scalable for larger teams or organizations.

Bonus Ideas

• API support for managing permissions.
• Audit log for permission changes.
• Temporary permissions (for e.g. incident response).

Thank you for considering this feature!

[amirhmoradi]

@NrwPlay Hi, I had the same requirements, and did a PR on coolify which was rejected saying it is for v5... So I created my own project and fixed the issue. Have a look here and hopefully this would be useful for you.
(Read the docs and test in a testing/isolated environment. No warranties, like all other opensource project :) )
https://github.com/amirhmoradi/coolify-enhanced

[NrwPlay]

Thanks!