mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-08-18 06:23:18 +00:00
fix(rbac): make complete built-in RBAC available on Community (#1793)
Open all five built-in global roles and stack/node scoped assignments on Community. Remove paid fences from user role create/update, scoped assignment CRUD, permission evaluation, and the Users settings UI. Admiral continues to own extended audit governance, LDAP directory integration, and other organizational assurance features. Built-in scoped RBAC is no longer marketed or enforced as paid-only.
This commit is contained in:
@@ -2,7 +2,6 @@ import { CronExpressionParser } from 'cron-parser';
|
||||
import { DatabaseService } from './DatabaseService';
|
||||
import type { ScheduledTask } from './DatabaseService';
|
||||
import { LicenseService } from './LicenseService';
|
||||
import type { LicenseTier } from './license-types';
|
||||
import { PROXY_TIER_HEADER, deployProvenanceHeaders } from './license-headers';
|
||||
import DockerController from './DockerController';
|
||||
import { ComposeService } from './ComposeService';
|
||||
@@ -333,10 +332,8 @@ export class SchedulerService {
|
||||
task.node_id,
|
||||
task.selector_type,
|
||||
);
|
||||
const tier: LicenseTier = LicenseService.getInstance().getTier();
|
||||
if (!checkPermissionForSubject(
|
||||
{ username: creator.username, role: creator.role, userId: creator.id },
|
||||
tier,
|
||||
scope.action,
|
||||
scope.resourceType,
|
||||
scope.resourceId,
|
||||
|
||||
Reference in New Issue
Block a user