first pass at access control setup

2026-03-24 14:45:07 -05:00
parent af5175b96a
commit 2ebb03b868
105 changed files with 6163 additions and 1416 deletions
--- a/packs/core/permission_sets/admin.yaml
+++ b/packs/core/permission_sets/admin.yaml
@@ -11,25 +11,17 @@ grants:
  - resource: triggers
    actions: [read, create, update, delete]
  - resource: executions
-    actions: [read, create, update, delete, cancel]
+    actions: [read, update, cancel]
  - resource: events
-    actions: [read, create, delete]
+    actions: [read]
  - resource: enforcements
-    actions: [read, create, delete]
+    actions: [read]
  - resource: inquiries
    actions: [read, create, update, delete, respond]
  - resource: keys
-    actions: [read, create, update, delete]
+    actions: [read, create, update, delete, decrypt]
  - resource: artifacts
    actions: [read, create, update, delete]
-  - resource: workflows
-    actions: [read, create, update, delete]
-  - resource: webhooks
-    actions: [read, create, update, delete]
-  - resource: analytics
-    actions: [read]
-  - resource: history
-    actions: [read]
  - resource: identities
    actions: [read, create, update, delete]
  - resource: permissions
--- a/packs/core/permission_sets/editor.yaml
+++ b/packs/core/permission_sets/editor.yaml
@@ -11,14 +11,8 @@ grants:
  - resource: triggers
    actions: [read]
  - resource: executions
-    actions: [read, create, cancel]
+    actions: [read, cancel]
  - resource: keys
-    actions: [read, update]
+    actions: [read, update, decrypt]
  - resource: artifacts
    actions: [read]
-  - resource: workflows
-    actions: [read, create, update]
-  - resource: analytics
-    actions: [read]
-  - resource: history
-    actions: [read]
--- a/packs/core/permission_sets/executor.yaml
+++ b/packs/core/permission_sets/executor.yaml
@@ -11,10 +11,8 @@ grants:
  - resource: triggers
    actions: [read]
  - resource: executions
-    actions: [read, create]
+    actions: [read]
+  - resource: keys
+    actions: [read]
  - resource: artifacts
    actions: [read]
-  - resource: analytics
-    actions: [read]
-  - resource: history
-    actions: [read]
--- a/packs/core/permission_sets/viewer.yaml
+++ b/packs/core/permission_sets/viewer.yaml
@@ -12,9 +12,7 @@ grants:
    actions: [read]
  - resource: executions
    actions: [read]
+  - resource: keys
+    actions: [read]
  - resource: artifacts
    actions: [read]
-  - resource: analytics
-    actions: [read]
-  - resource: history
-    actions: [read]