feat: granular permission assignment for organization members #17804
pr.yaml
on: pull_request
Matrix: build / build-and-dockerize
alpha
/
cli-artifacts
4m 1s
alpha
/
...
/
snapshot
2m 15s
graphql-breaking-changes
/
search-token
0s
db-types
/
diff
1m 10s
test
/
db-migrations
1m 19s
test
/
unit
2m 2s
code-style
/
eslint-and-prettier
3m 32s
typescript
/
typecheck
4m 52s
website-preview
/
deployment
6s
storybook-preview
/
deployment
2m 59s
release-candidate
/
snapshot
Matrix: static-analysis / analyze
Matrix: alpha / cli-test
graphql-breaking-changes
/
check
8s
test
/
e2e
8m 49s
Matrix: test / integration
alpha
/
...
/
Build CLI Docker Image
1m 49s
Annotations
9 errors and 39 warnings
tests/api/organization/members.spec.ts > invited member should have basic scopes (Viewer role):
integration-tests/tests/api/organization/members.spec.ts#L51
Error: Snapshot `invited member should have basic scopes (Viewer role) 1` mismatched
- Expected
+ Received
[
- organization:describe,
support:manageTickets,
- project:create,
project:describe,
- target:create,
appDeployment:describe,
laboratory:describe,
]
❯ tests/api/organization/members.spec.ts:51:35
|
tests/api/policy/policy-access.spec.ts > Policy Access > Project > should fail to update Project.schemaPolicy if the user lacks access to SETTINGS:
integration-tests/tests/api/policy/policy-access.spec.ts#L104
AssertionError: expected 'No access (reason: "Missing permissio…' to be 'No access (reason: "Missing permissio…' // Object.is equality
Expected: "No access (reason: "Missing permission for performing 'schemaLinting:modifyProjectRules' on resource")"
Received: "No access (reason: "Missing permission for performing 'organization:describe' on resource")"
❯ tests/api/policy/policy-access.spec.ts:104:68
|
tests/api/policy/policy-access.spec.ts > Policy Access > Organization > should successfully fetch Organization.schemaPolicy if the user has access to read:org:
integration-tests/testkit/graphql.ts#L68
Error: Expected GraphQL response to have no errors, but got 1 errors:
No access (reason: "Missing permission for performing 'organization:describe' on resource")
endpoint: http://localhost:8082/graphql
query:
query OrganizationSchemaPolicyAccess($selector: OrganizationSelectorInput!) {
organization(selector: $selector) {
organization {
schemaPolicy {
id
}
}
}
}
body:
{
"errors": [
{
"message": "No access (reason: \"Missing permission for performing 'organization:describe' on resource\")",
"locations": [
{
"line": 2,
"column": 3
}
],
"path": [
"organization"
],
"extensions": {
"code": "UNAUTHORISED"
}
}
],
"data": {
"organization": null
}
}
request-id: EA3ltOmCT02yVFGa/T+UBw/0000000214
❯ Object.expectNoGraphQLErrors testkit/graphql.ts:68:15
❯ tests/api/policy/policy-access.spec.ts:261:24
❯ tests/api/policy/policy-access.spec.ts:253:24
|
test / integration (2)
Process completed with exit code 1.
|
test / integration (3)
The job was canceled because "_2" failed.
|
test / integration (3)
The operation was canceled.
|
test / integration (1)
The job was canceled because "_2" failed.
|
test / integration (1)
The operation was canceled.
|
test / e2e
The action 'cypress' has timed out after 6 minutes.
|
website-preview / deployment
Unable to find merge base between e720b743243b6ed04f429b2c3f530771e73bd453 and 737f2a474854fa57691c14f8c6ff0135d76d8a19
|
alpha / npm / snapshot
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|
alpha / npm / snapshot
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|
alpha / npm / snapshot
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|
alpha / npm / snapshot
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|
alpha / npm / snapshot
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|
static-analysis / analyze (javascript)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
static-analysis / analyze (javascript)
Unable to validate code scanning workflow: MissingPushHook
|
static-analysis / analyze (typescript)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
static-analysis / analyze (typescript)
Unable to validate code scanning workflow: MissingPushHook
|
storybook-preview / deployment
Unable to find merge base between e720b743243b6ed04f429b2c3f530771e73bd453 and 737f2a474854fa57691c14f8c6ff0135d76d8a19
|
code-style / eslint-and-prettier:
packages/web/app/src/components/organization/members/permission-selector.tsx#L125
Arbitrary value classname '-m-[1px]' should not start with a dash (-)
|
alpha / cli-test (ubuntu-latest)
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
Variables should be defined before their use:
docker/cli.dockerfile#L13
UndefinedVar: Usage of undefined variable '$RELEASE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Variables should be defined before their use:
docker/cli.dockerfile#L14
UndefinedVar: Usage of undefined variable '$IMAGE_DESCRIPTION'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Legacy key/value format with whitespace separator should not be used:
docker/cli.dockerfile#L20
LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/
|
Variables should be defined before their use:
docker/cli.dockerfile#L21
UndefinedVar: Usage of undefined variable '$RELEASE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Legacy key/value format with whitespace separator should not be used:
docker/cli.dockerfile#L21
LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/
|
Variables should be defined before their use:
docker/cli.dockerfile#L12
UndefinedVar: Usage of undefined variable '$IMAGE_TITLE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Variables should be defined before their use:
docker/services.dockerfile#L14
UndefinedVar: Usage of undefined variable '$IMAGE_DESCRIPTION'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Legacy key/value format with whitespace separator should not be used:
docker/services.dockerfile#L20
LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/
|
Legacy key/value format with whitespace separator should not be used:
docker/services.dockerfile#L21
LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/
|
Legacy key/value format with whitespace separator should not be used:
docker/services.dockerfile#L22
LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/
|
Variables should be defined before their use:
docker/migrations.dockerfile#L12
UndefinedVar: Usage of undefined variable '$RELEASE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Legacy key/value format with whitespace separator should not be used:
docker/migrations.dockerfile#L12
LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/
|
Variables should be defined before their use:
docker/migrations.dockerfile#L15
UndefinedVar: Usage of undefined variable '$IMAGE_TITLE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Variables should be defined before their use:
docker/services.dockerfile#L13
UndefinedVar: Usage of undefined variable '$RELEASE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Variables should be defined before their use:
docker/migrations.dockerfile#L17
UndefinedVar: Usage of undefined variable '$IMAGE_DESCRIPTION'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Variables should be defined before their use:
docker/services.dockerfile#L21
UndefinedVar: Usage of undefined variable '$RELEASE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Variables should be defined before their use:
docker/services.dockerfile#L21
UndefinedVar: Usage of undefined variable '$RELEASE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Legacy key/value format with whitespace separator should not be used:
docker/migrations.dockerfile#L12
LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/
|
Legacy key/value format with whitespace separator should not be used:
docker/services.dockerfile#L20
LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/
|
Variables should be defined before their use:
docker/migrations.dockerfile#L17
UndefinedVar: Usage of undefined variable '$IMAGE_DESCRIPTION'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Variables should be defined before their use:
docker/services.dockerfile#L13
UndefinedVar: Usage of undefined variable '$RELEASE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Variables should be defined before their use:
docker/migrations.dockerfile#L12
UndefinedVar: Usage of undefined variable '$RELEASE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Variables should be defined before their use:
docker/migrations.dockerfile#L15
UndefinedVar: Usage of undefined variable '$IMAGE_TITLE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Legacy key/value format with whitespace separator should not be used:
docker/services.dockerfile#L22
LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/
|
Variables should be defined before their use:
docker/services.dockerfile#L12
UndefinedVar: Usage of undefined variable '$IMAGE_TITLE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Variables should be defined before their use:
docker/services.dockerfile#L22
UndefinedVar: Usage of undefined variable '$PORT'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
Artifacts
Produced during runtime
Name | Size | |
---|---|---|
cypress
|
29.6 MB |
|
graphql-hive~console~CDI36T+13.dockerbuild
|
1.83 MB |
|
graphql-hive~console~PYE0GW+13.dockerbuild
|
2.23 MB |
|
graphql-hive~console~QPLJG8.dockerbuild
|
57.2 KB |
|
hive-cli-darwin-arm64
|
42.1 MB |
|
hive-cli-darwin-x64
|
42.8 MB |
|
hive-cli-linux-arm
|
42.6 MB |
|
hive-cli-linux-x64
|
47.5 MB |
|
hive-cli-win-x64
|
37.7 MB |
|
hive-cli-win-x86
|
35.1 MB |
|