influxdata / influxdata/influxdb

Add permissions specific to reading usage and limits in Cloud

Open
#23,018 0 comments 3 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
31.7k
Forks
3.7k
Avg merge
13h 37m
Merged PRs (30d)
8

Description

__Proposal:__
Add a permissions set specific to reading usage data and limits in InfluxDB Cloud. This will likely affect the following user-facing touch points:

- Creating tokens in the UI
- Creating tokens in the CLI (possibly adding a `--read-usage` flag)
- Creating tokens via the API

__Current behavior:__
Currently, only All-Access tokens have the permissions necessary to hit the usage endpoints. Understandably, users don't want to grant that much access for a simple request.

__Desired behavior:__
The ability to create a token with read-only access to usage metrics and usage limits.

__Use case:__
Limit exposure for simple requests.

Contributor guide

Open the contributing guide

Research direction

Start by tracing token creation in the UI, CLI, and API, then inspect how the usage endpoints check permissions. Done means a token can be created with read-only access to usage metrics and limits through the listed touch points, without requiring an All-Access token.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
api, cli, cloud, frontend
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.