Skip to content

[Auth] Allow/forbid operations in deployments panel based on user roles #149

@Pasichniuk

Description

@Pasichniuk

Name and Version

ai-dial-admin-deployment-manager-backend [0.13.1-rc]

What is the problem this feature will solve?

There is a need to provide read-only access to DM.

What is the feature you are proposing to solve the problem?

  1. Add env var where user roles are mapped to FULL_ADMIN, READ_ONLY_ADMIN backend roles
  2. Return mapped role(s) for /api/v1/security-info request, so that FE is able to display menu items accordingly
  3. Secure endpoints so that READ_ONLY_ADMIN can not perform any changes and is only able to view entities

What alternatives have you considered?

No response

Metadata

Metadata

Assignees

Labels

Priority-HighHigh-priority tasks requiring immediate action.SIA-requiredTasks that require Security Impact Analysis (SIA).enhancementNew requested features or functional improvements to existing components.to-be-documentedTasks or features that require documentation but have not yet been covered.

Projects

Status

To-Do

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions