FlowFuse / FlowFuse/flowfuse

Granular RBAC: remove hasALowerOrEqualTeamRoleThan and hasAMinimumTeamRoleOf composables

Open
#6,015 2 comments 0 reactions 1 assignee Claimed by @cstns View on GitHub
task
Dominant language
JavaScript
Stars
400
Forks
89
Avg merge
1d 21h
Merged PRs (30d)
146

Description

### Description

The permissions composable exposes:

- `hasPermission`
- `hasAMinimumTeamRoleOf`
- `hasALowerOrEqualTeamRoleThan`

as permissions check utilities.

The latter two don't make use of the permissions model; they encourage hardcoded choices in the front-end code regarding what role is allowed to do something.

Those functions should be removed in favour of `hasPermission` with the appropriate permissions added to `forge/lib/permissions.js`.

@cstns WDYT?

### Epic/Story

_No response_

### Have you provided an initial effort estimate for this issue?

I have provided an initial effort estimate

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.