mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-08-19 06:46:23 +00:00
fix(rbac): make complete built-in RBAC available on Community (#1793)
Open all five built-in global roles and stack/node scoped assignments on Community. Remove paid fences from user role create/update, scoped assignment CRUD, permission evaluation, and the Users settings UI. Admiral continues to own extended audit governance, LDAP directory integration, and other organizational assurance features. Built-in scoped RBAC is no longer marketed or enforced as paid-only.
This commit is contained in:
@@ -186,7 +186,7 @@ See [Licensing & Billing](/features/licensing) for the full walkthrough includin
|
||||
## Users
|
||||
|
||||
<Note>
|
||||
User management requires an admin role. Community supports unlimited accounts with the Admin and Viewer roles.
|
||||
User management requires an admin role. Community supports unlimited accounts with the full built-in RBAC system (five roles and scoped assignments).
|
||||
</Note>
|
||||
|
||||
**Scope:** Global
|
||||
@@ -206,9 +206,9 @@ Create and manage user accounts with role-based access. The masthead publishes a
|
||||
|------|------|-------------|
|
||||
| **Admin** | Community | Full access to all features |
|
||||
| **Viewer** | Community | Read-only access to stacks and nodes |
|
||||
| **Deployer** | Admiral | Can view stacks and trigger deployments |
|
||||
| **Node Admin** | Admiral | Full stack and node management, including node-scoped operational Settings |
|
||||
| **Auditor** | Admiral | Read-only plus audit log access |
|
||||
| **Deployer** | Community | Can view stacks and trigger deployments |
|
||||
| **Node Admin** | Community | Full stack and node management, including node-scoped operational Settings |
|
||||
| **Auditor** | Community | Read-only plus audit log access |
|
||||
|
||||
See [RBAC & User Management](/features/rbac) for details on what each role can access.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user