Separate role for Create and Edit permission for Feature Flags
complete
O
Onyx Antelope
Based on the RBAC model defined, a User is given create access. Hence, when a feature flag is created, it gets created in all environments. As the create+edit permission is clubbed, the User is able to edit (add targets and variations) in the prod environment.
Our requirement is for a User to be able to create the feature flag in prod, but to be not able to do any form of edit to it.
This will require harness to treat create and edit as two separate functions and to be assignable when defining RBAC rules.
Log In
Canny AI
Merged in a post:
Need a feature which will allow users to have seperate roles for creating a flag and editing a flag
R
Ruby Octopus
Need a feature which will introduce new permissions that will allow users to have seperate roles for creating a flag and editing a flag. The solution should be able to create FF but they should not be able to make changes to the default FF flag values in Production environment.
Matt Schillerstrom (PM for Feature Flags)
complete
We have split the RBAC permissions for edit and create. Please email support@harness.io for enablement if we haven't already reached out and had a meeting to update for you. Thank you.
F
Fawn Antelope
This is also essential in basic RBAC permissions for user roles. please separate Create and Edit.
This post was marked as
in progress
E
Electric Zebra
This is essential for us too.
As edit gives permission to change the default rule or add specific targeting, it doesn't matter people don't have the toggle permission. Anyone who has create/edit, can find a flag that is already enabled, make a change that alters it for all targets either by changing the default rule, or adding a specific target override.
Unfortunately it's impossible not to give this permission, as if a user doesn't have Create permission in ALL environments, they cannot create flags in ANY environment.
The ideal situation that we would like to support is that our Engineering team can create flags in all environments, but only edit flags in staging environments.
Matt Schillerstrom (PM for Feature Flags)
under review