[Apps] Permissions

[snoe]

Links

• product doc
• eng doc

Implementation Plan

Milestone 1

Goal: Add new permissions to regex/schema/lists

Backend

• [ ] ~[Apps] Add /app/* permissions~
• [ ] #25433
• [ ] ~[Apps] Add /db/:id/schema/…./execute permission~

Frontend

• [ ] ~[Apps] Add top level App permissions UI~
• [ ] [Apps] Add column to Data permissions UI for custom action execution permission
• [ ] ~[Apps] Add column to Data table permissions UI for implicit action execution permission~
  • ~custom vs implicit open question~

Milestone 2

Goal: Use app permissions and avoid running into collection permissions

Backend

• [ ] ~[Apps] Add /app routes~
  • ~check app permission, set app context for query and execution~
• [ ] ~#25443~
• [ ] [Apps] Check blocking permissions for execute (users should have at least "no self-service" permission)
• [ ] ~[Apps] How to run queries to check app and data permission instead of collection permission (how to modify query-processor.middleware.permissions/check-query-permissions to use /app/:id/use instead of /collection/:id/read in app context)~

Frontend

• [ ] Modify all in-app calls to use /api/app/* routes