You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There are three steps to properly solve this issue:
Quick bugfix. Right now the user can remove group, if they can invite team. Quick solution: couple remove permission with update permission, rather then invite permission. ( bugfix bugfix: EnvironmentGroup can remove other groups #1234 )
Introduce ResourcePolicy with the resource_type = 'EnvironmentGroup'. In invitation form the user will have to input 'Supervisors' -- team/group, that have permissions to update and remove EnvironmentGroup.
TO DECIDE: Implement 'permission boundaries' mechanism. Each tram can grant other team with limited permissions.
The text was updated successfully, but these errors were encountered:
#1212
There are three steps to properly solve this issue:
Quick bugfix. Right now the user can remove group, if they can invite team. Quick solution: couple remove permission with update permission, rather then invite permission. ( bugfix bugfix: EnvironmentGroup can remove other groups #1234 )
Introduce ResourcePolicy with the resource_type = 'EnvironmentGroup'. In invitation form the user will have to input 'Supervisors' -- team/group, that have permissions to update and remove EnvironmentGroup.
TO DECIDE: Implement 'permission boundaries' mechanism. Each tram can grant other team with limited permissions.
The text was updated successfully, but these errors were encountered: