Allow more granular permissions
long-term
Johannes Liegl
From the customer: In terms of permissions I've seen there are 2 roles
- Editor
- Viewer
I was looking for an option to define the configuration for those roles
My idea is to grant limited access to specific users. To have limited access (enable/disable flags, manage rollout percentages).
Log In
d
david.karow
Merged in a post:
can you tell me the difference in permissions between editing and toggling a feature flag?
O
Olive drab Caribou
Feature request:
Split "Create" and "Edit" permissions in feature flags into two separate ACL's that can be assigned to unique roles.
Our use case:
We want certain required parameters to be enforced when creating a flag, we have a script/tooling to do so already. Once created we want users to be able to edit feature flags. Currently nothing is forcing the users to use the scripts, they can continue to create new feature flags from the UI.
d
david.karow
Merged in a post:
FME RBAC break down
D
Denim Gerbil
They would like little more granularity on the FME Feature Flag resource, imagining an admin can..
- View
- Create/Edit definition
- Change target rules
Where a manager could have access to:
- View
- Create/Edit definition
- BUT NOT Change target rules
They want the manager/editor role to be able to separate changing targeting rules from the rest of the flag definition. This will help them better manage their workflow without needing to rely on approving every single change just to make sure end users are following the rules.
d
david.karow
Merged in a post:
More granular permissions/restrictions
Johannes Liegl
Customer would like to be able to restrict on a more granular level. In this case, allow the dev team to be able to instantiate in production, but not make changes to the flags. (Similar to how we allow kills to be bypassed in approval flows.)
This is low priority, as setting up approval flows for this purpose works for now as a workaround.
d
david.karow
Merged in a post:
More complex RBAC
U
Utrecht blue Chipmunk
The level of control over user permissions in FME is too basic for their needs. They'd like to be able to control more specifically who can edit what.
d
david.karow
marked this post as
long-term
Johannes Liegl
marked this post as
under review