4 Commits

Author	SHA1	Message	Date
Steven Masley	b0a16150a3	chore: Implement standard rbac.Subject to be reused everywhere (#5881) ... * chore: Implement standard rbac.Subject to be reused everywhere An rbac subject is created in multiple spots because of the way we expand roles, scopes, etc. This difference in use creates a list of arguments which is unwieldy. Use of the expander interface lets us conform to a single subject in every case	2023-01-26 14:42:54 -06:00
Steven Masley	08cce81ac8	feat: Implement allow_list for scopes for resource specific permissions (#5769) ... * feat: Implement allow_list for scopes for resource specific permissions Feature that adds an allow_list for scopes to specify particular resources. This enables workspace agent tokens to use the same RBAC system as users. - Add ID to compileSQL matchers * Plumb through WithID on rbac objects * Rename Scope -> ScopeName * Update input.json with scope allow_list Co-authored-by: Cian Johnston <cian@coder.com>	2023-01-19 13:41:36 -06:00
Jon Ayers	3120c94c22	feat: add template RBAC/groups (#4235)	2022-10-10 15:37:06 -05:00
Dean Sheather	29d804e692	feat: add API key scopes and application_connect scope (#4067)	2022-09-19 17:39:02 +00:00