fix(rbac): make complete built-in RBAC available on Community (#1793)

Open all five built-in global roles and stack/node scoped assignments
on Community. Remove paid fences from user role create/update, scoped
assignment CRUD, permission evaluation, and the Users settings UI.

Admiral continues to own extended audit governance, LDAP directory
integration, and other organizational assurance features. Built-in
scoped RBAC is no longer marketed or enforced as paid-only.
This commit is contained in:
Anso
2026-08-07 23:50:53 -04:00
committed by GitHub
parent e084ad424c
commit 5c52ae26eb
15 changed files with 126 additions and 126 deletions
-3
View File
@@ -2,7 +2,6 @@ import { CronExpressionParser } from 'cron-parser';
import { DatabaseService } from './DatabaseService';
import type { ScheduledTask } from './DatabaseService';
import { LicenseService } from './LicenseService';
import type { LicenseTier } from './license-types';
import { PROXY_TIER_HEADER, deployProvenanceHeaders } from './license-headers';
import DockerController from './DockerController';
import { ComposeService } from './ComposeService';
@@ -333,10 +332,8 @@ export class SchedulerService {
task.node_id,
task.selector_type,
);
const tier: LicenseTier = LicenseService.getInstance().getTier();
if (!checkPermissionForSubject(
{ username: creator.username, role: creator.role, userId: creator.id },
tier,
scope.action,
scope.resourceType,
scope.resourceId,