[Apps] Permissions
- Dominant language
- Clojure
- Stars
- 49.3k
- Forks
- 6.8k
- Avg merge
- 1d 13h
- Merged PRs (30d)
- 653
Description
## **Links**
- [product doc](https://www.notion.so/metabase/Implement-Data-Apps-Permissions-732e27313df14ec99a10d7603026a4f2)
- [eng doc](https://www.notion.so/metabase/Permission-Tasks-9fd88a803bed4a3a9a3d75ca1f07b971)
## **Implementation Plan**
### Milestone 1
**Goal: Add new permissions to regex/schema/lists**
#### Backend
- [ ] ~[Apps] Add /app/* permissions~
- [x] #25433
- [ ] ~[Apps] Add /db/:id/schema/…./execute permission~
#### Frontend
- [ ] ~[Apps] Add top level App permissions UI~
- [ ] [Apps] Add column to Data permissions UI for custom action execution permission
- [ ] ~[Apps] Add column to Data table permissions UI for implicit action execution permission~
- ~custom vs implicit open question~
### Milestone 2
**Goal: Use app permissions and avoid running into collection permissions**
#### Backend
- [ ] ~[Apps] Add /app routes~
- ~check app permission, set app context for query and execution~
- [ ] ~#25443~
- [x] #25629
- [x] #25765
- [ ] ~[Apps] How to run queries to check app and data permission instead of collection permission (how to modify ``query-processor.middleware.permissions/check-query-permissions`` to use `/app/:id/use` instead of ``/collection/:id/read`` in app context)~
- [x] #25644
- [x] #25691
- [x] #25680
#### Frontend
- [ ] Modify all in-app calls to use `/api/app/*` routes
Contributor guide
Assessment
This issue has not been assessed yet.