metabase / metabase/metabase

[Apps] Permissions

Open
#25,420 0 comments 0 reactions 2 assignees Claimed by @metamben View on GitHub
.Epic Querying/Actions
Dominant language
Clojure
Stars
49.3k
Forks
6.8k
Avg merge
1d 13h
Merged PRs (30d)
653

Description

## **Links**
- [product doc](https://www.notion.so/metabase/Implement-Data-Apps-Permissions-732e27313df14ec99a10d7603026a4f2)
- [eng doc](https://www.notion.so/metabase/Permission-Tasks-9fd88a803bed4a3a9a3d75ca1f07b971)

## **Implementation Plan**

### Milestone 1

**Goal: Add new permissions to regex/schema/lists**

#### Backend
- [ ] ~[Apps] Add /app/* permissions~
- [x] #25433
- [ ] ~[Apps] Add /db/:id/schema/…./execute permission~

#### Frontend
- [ ] ~[Apps] Add top level App permissions UI~
- [ ] [Apps] Add column to Data permissions UI for custom action execution permission
- [ ] ~[Apps] Add column to Data table permissions UI for implicit action execution permission~
- ~custom vs implicit open question~

### Milestone 2

**Goal: Use app permissions and avoid running into collection permissions**

#### Backend
- [ ] ~[Apps] Add /app routes~
- ~check app permission, set app context for query and execution~
- [ ] ~#25443~
- [x] #25629
- [x] #25765
- [ ] ~[Apps] How to run queries to check app and data permission instead of collection permission (how to modify ``query-processor.middleware.permissions/check-query-permissions`` to use `/app/:id/use` instead of ``/collection/:id/read`` in app context)~
- [x] #25644
- [x] #25691
- [x] #25680

#### Frontend
- [ ] Modify all in-app calls to use `/api/app/*` routes

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.