mirror of
https://github.com/coder/coder.git
synced 2026-06-02 20:48:20 +00:00
Cian Johnston
3ce82bb885
- Add `chat-access` built-in role granting chat CRUD at User scope
- Exclude `ResourceChat` from member, org member, and org service
account `allPermsExcept` calls
- Allow system, owner, and user-admin to assign the new role
- Migration auto-assigns role to users who have ever created a chat
- Update RBAC test matrix: `memberMe` denied, `chatAccessUser` allowed
**Breaking change**: Members without `chat-access` lose chat creation
ability. Migration covers existing chat creators. Members who have never
created a chat do not get this role automatically applied.
> 🤖 This PR was created by a Coder Agent and reviewed by me.
19 lines
786 B
Go
19 lines
786 B
Go
package codersdk
|
|
|
|
// Ideally these roles would be generated from the rbac/roles.go package.
|
|
const (
|
|
RoleOwner string = "owner"
|
|
RoleMember string = "member"
|
|
RoleTemplateAdmin string = "template-admin"
|
|
RoleUserAdmin string = "user-admin"
|
|
RoleAuditor string = "auditor"
|
|
RoleAgentsAccess string = "agents-access"
|
|
|
|
RoleOrganizationAdmin string = "organization-admin"
|
|
RoleOrganizationMember string = "organization-member"
|
|
RoleOrganizationAuditor string = "organization-auditor"
|
|
RoleOrganizationTemplateAdmin string = "organization-template-admin"
|
|
RoleOrganizationUserAdmin string = "organization-user-admin"
|
|
RoleOrganizationWorkspaceCreationBan string = "organization-workspace-creation-ban"
|
|
)
|