manager
manager copied to clipboard
feat: [M3-7686] - Restricted access UX for Databases
Description ๐
To prevent unauthorized access to specific flows and provide clearer guidance, we aim to restrict entry to users without the required permissions.
The views under /databases have been updated to disable controls for restricted users
Changes ๐
- "Create Database Cluster" button on the landing page (with or without entries) is disabled for users without "add_databases" access
- All buttons & inputs in the Summary, Backups, Resize, Settings tabs under Database details have been disabled for users with "read_only" access
- Added a notification for restricted access users on the database details page
Target release date ๐๏ธ
NA
Preview ๐ท
| Before | After |
|---|---|
How to test ๐งช
Verification steps
- Login as a user with full access and add databases. Grant read_only permissions to these new resources to the restricted user
- Login as the restricted user and navigate to the databases page. The "Create Database Cluster" button should be disabled
- Navigate to the details page for any database - You should see a notification. Besides that, all form inputs, buttons should be disabled.
- Login again as the user with unrestricted access and remove all access to all the databases for the restricted user. Login as the restricted user - the empty landing page for Databases should have the create button disabled.
As an Author I have considered ๐ค
Check all that apply
- [ ] ๐ Doing a self review
- [ ] โ Our contribution guidelines
- [ ] ๐ค Splitting feature into small PRs
- [ ] โ Adding a changeset
- [ ] ๐งช Providing/Improving test coverage
- [ ] ๐ Removing all sensitive information from the code and PR description
- [ ] ๐ฉ Using a feature flag to protect the release
- [ ] ๐ฃ Providing comprehensive reproduction steps
- [ ] ๐ Providing or updating our documentation
- [ ] ๐ Scheduling a pair reviewing session
- [ ] ๐ฑ Providing mobile support
- [ ] โฟ Providing accessibility support
Changes look good!
Should we also disable the "Remove" buttons on Access Controls when the user has read-only permission?
Hi Banks, thanks for pointing this out! I've updated the PR
Coverage Report: โ
Base Coverage: 86.15%
Current Coverage: 86.16%
