Graylog2 / Graylog2/graylog2-server

Display Permissions Granted by Role

Open
#22,389 1 comment 1 reaction 0 assignees View on GitHub
feature
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

Specific permissions granted by each Role should be listed in its Role Details UI.

## What?
Currently, the Role Details UI only describes what the Role grants in plain English:

![Image](https://github.com/user-attachments/assets/fe2855f7-1feb-4b01-87e7-a96d1b0fedc5)

While this may suffice in a majority of cases where admins want to grant permissions to users, there is no documentation to support the creation of custom roles where admins need a list of specific permissions to grant their role.

Listing what permissions each default Role grants will make it easier for admins to create custom Roles based on these default Roles because they can see what permissions they have to choose from.

Currently these permissions are only accessible via API, which is not very user friendly. And the only way to get the permissions of a specific Role is to know its specific alphanumeric `id`, which is an unreasonable expectation of users to know:

```
{
"id": "63e51980d0ffff4811e66c9e",
"name": "Alerts Manager",
"description": "Allows reading and writing all event definitions and event notifications (built-in)",
"permissions": [
"eventnotifications:edit",
"eventdefinitions:read",
"eventdefinitions:create",
"eventdefinitions:delete",
"eventdefinitions:execute",
"eventdefinitions:edit",
"eventnotifications:create",
"eventnotifications:delete",
"eventnotifications:read"
],
"read_only": true
}
```

## Proposal
I propose the list of permissions granted by a Role (including Custom Roles) be listed somewhere on the Role Details page, perhaps here:

![Image](https://github.com/user-attachments/assets/bc2791e6-9fd3-4c26-a67d-bb513964fdc2)

## Your Environment

* Graylog Version: 6.1

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.