cockroachdb / cockroachdb/cockroach
schedules: add VIEWSCHEDULES global permission
- Dominant language
- Go
- Stars
- 32.5k
- Forks
- 4.1k
- PR merge metrics
- PR metrics pending
Description
In 23.1, we added the VIEWJOB Global permission (https://github.com/cockroachdb/cockroach/pull/97860) targeted at the operator persona to allow them to view jobs without being able to manipulate them. We prioritized jobs because of the need to monitor jobs from a stability standpoint. We've also received a request for a similar VIEWSCHEUDLES permission for operators. Today, you need to be an admin to view schedules.
https://cockroachlabs.slack.com/archives/CHKQGKYEM/p1684165555682029?thread_ts=1682023821.412739&cid=CHKQGKYEM
Jira issue: CRDB-28096
Epic CRDB-32494
Contributor guide
Research direction
Start by reviewing the existing VIEWJOB global permission in pull request 97860 and trace how schedule visibility is currently restricted to admins. Identify the permission definitions, schedule access paths, and related tests from that implementation. Done means operators can view schedules with VIEWSCHEDULES without gaining permission to manipulate them.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- authorization
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100