dataall
dataall copied to clipboard
Manage Team in Environment permissions to invite/update/remove other teams
#1212
There are three steps to properly solve this issue:
-
[x] Quick bugfix. Right now the user can remove group, if they can invite team. Quick solution: couple remove permission with update permission, rather then invite permission. ( bugfix #1234 )
-
[ ] Introduce ResourcePolicy with the resource_type = 'EnvironmentGroup'. In invitation form the user will have to input 'Supervisors' -- team/group, that have permissions to update and remove EnvironmentGroup.
-
[ ] TO DECIDE: Implement 'permission boundaries' mechanism. Each tram can grant other team with limited permissions.
May want to deisgn with similar logic as to what we implement for Organizations w.r.t https://github.com/data-dot-all/dataall/pull/1273
@SofiaSazonova @noah-paige @anmolsgandhi should we nominate this item for 2.7?